pubnub-app-context
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a technical reference and implementation guide for the PubNub App Context API. All code snippets and instructions use standard PubNub SDK patterns and represent legitimate application development workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill involves managing and storing user-provided metadata (such as profile names, custom preferences, and roles). While this data represents an ingestion point for external content, the skill focuses strictly on storage and retrieval operations without exploitable capabilities triggered by the data itself. The risk is considered low and inherent to the functionality of a directory service.
- [COMMAND_EXECUTION]: The skill mentions the
manage_app_contexttool, which is a platform-integrated tool for interacting with the PubNub Admin API. Its usage described in the instructions is consistent with administrative management and does not involve arbitrary command injection or unauthorized execution. - [DATA_EXPOSURE]: Code examples utilize generic placeholders and public CDN links (e.g., example.com) for metadata fields like
profileUrl. No hardcoded credentials, API keys, or sensitive local file path accesses were found.
Audit Metadata