ably
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and suggests fetching documentation from
ably.comand its associated machine-readablellms.txt. Ably is a well-known technology service, and these references are used for legitimate documentation retrieval. - [COMMAND_EXECUTION]: Instructions mention the installation and use of the Ably CLI (
@ably/cli) for debugging purposes. This is a standard tool provided by the vendor for testing pub/sub features and does not involve high-risk arbitrary command execution. - [CREDENTIALS_UNSAFE]: The skill explicitly warns against embedding API keys in client-side code. It provides safe examples using environment variables (
process.env.ABLY_API_KEY) and server-side token issuance, which aligns with security best practices.
Audit Metadata