websocket-realtime
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides implementation patterns that rely on standard, well-known Node.js packages for real-time networking and data management.
- Referenced packages:
ws,jsonwebtoken,express,socket.io,@socket.io/redis-adapter,redis, andzod. - [INDIRECT_PROMPT_INJECTION]: The skill defines an architecture for processing untrusted data from external sources (WebSocket clients).
- Ingestion points: Logic for handling incoming data in
SKILL.mdandreferences/advanced.mdvia thews.on('message')event. - Capability inventory: The skill demonstrates broadcasting received messages to other connected clients and managing room-based state.
- Sanitization: The provided "GOOD" and "Production" examples explicitly address data safety by using Zod for strict schema validation and using standard JSON parsing to ensure input conforms to expected structures.
Audit Metadata