redis-python
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses well-known, industry-standard Python packages ('redis', 'msgpack') from official repositories.
- [SAFE]: Explicit security warnings are provided regarding the 'pickle' library, specifically noting that deserializing untrusted data can lead to arbitrary code execution.
- [COMMAND_EXECUTION]: The skill facilitates the execution of Redis commands through the 'redis-py' client. This is the primary and intended purpose of the skill.
- [DATA_EXPOSURE]: Includes placeholders for credentials ('yourpassword') and configuration paths ('/path/to/client.crt') which is standard for documentation and does not represent a credential leak.
- [INDIRECT_PROMPT_INJECTION]: As the skill retrieves data from an external Redis store, there is an inherent surface for indirect prompt injection if the retrieved data is used to construct subsequent prompts without sanitization.
- Ingestion points: Data is retrieved via 'r.get()', 'r.hget()', and the 'pubsub' listener.
- Boundary markers: None present in the code examples to distinguish data from instructions.
- Capability inventory: Full access to Redis operations, including key manipulation and data storage.
- Sanitization: The skill correctly identifies and warns against unsafe deserialization methods like 'pickle'.
Audit Metadata