websocket-realtime

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides implementation patterns that rely on standard, well-known Node.js packages for real-time networking and data management.
  • Referenced packages: ws, jsonwebtoken, express, socket.io, @socket.io/redis-adapter, redis, and zod.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines an architecture for processing untrusted data from external sources (WebSocket clients).
  • Ingestion points: Logic for handling incoming data in SKILL.md and references/advanced.md via the ws.on('message') event.
  • Capability inventory: The skill demonstrates broadcasting received messages to other connected clients and managing room-based state.
  • Sanitization: The provided "GOOD" and "Production" examples explicitly address data safety by using Zod for strict schema validation and using standard JSON parsing to ensure input conforms to expected structures.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 09:14 PM
Security Audit — agent-trust-hub — websocket-realtime