http-service-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution and Process Management: The skill uses
subprocess.runto calllsofandos.killto manage process lifecycles. This pattern is designed to prevent port-binding failures during service restarts. While functional, it involves system-level interactions that should be scoped to specific ports and processes to ensure they do not affect unrelated system components.- Disabled SSL Verification: The pattern for background poll loops useshttpx.AsyncClient(verify=False). As noted in the skill's documentation, this is intended to support connections to upstream services using self-signed certificates. This configuration bypasses standard certificate validation and should be used only in trusted internal network environments.- Indirect Prompt Injection Surface: The skill defines endpoints for WebSocket relaying and Server-Sent Events (SSE) that ingest and process external data. - Ingestion points: Data enters the context via WebSocket messages through
websocket.receiveand by reading from external log files likeevents.jsonl. - Capability inventory: The skill patterns include file system access via
open, network operations usingwebsockets.connect, and process management withsubprocess.run. - Boundary markers: The provided snippets do not include explicit boundary markers or instructions to ignore embedded commands in the relayed data stream.
- Sanitization: The snippets show
instance_idbeing interpolated into file paths without explicit validation or sanitization, which is a common implementation area requiring additional safety logic in production code.
Audit Metadata