websocket-realtime-builder
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install
socket.ioandsocket.io-clientthrough standard package management. These are well-known and widely used libraries for WebSocket communication. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and distribution of user-provided text messages through a WebSocket server and client interface.
- Ingestion points: User-provided strings enter the system via the
send-messageevent handler in the server-side code withinSKILL.md. - Boundary markers: The templates do not include specific delimiters or instructional barriers to prevent an agent from potentially interpreting user-generated content as commands.
- Capability inventory: The system has capabilities to store content in a database (
db.message.create) and broadcast it to other users through network emissions (emit). - Sanitization: There is no content validation or escaping logic present in the provided templates to sanitize user-generated strings before they are processed or displayed.
Audit Metadata