pubnub-app-developer
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate documentation, architectural patterns, and code examples for implementing PubNub messaging services.
- [SAFE]: SDK initialization patterns correctly use environment variables (e.g.,
process.env.PN_PUBLISH_KEY) and placeholders for keys, following secure development practices. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided application requirements to generate messaging logic and utilize network capabilities via MCP tools (e.g.,
send_pubnub_message). While this workflow involves untrusted input entering the agent's context, the risk is a standard characteristic of development-focused skills and is mitigated by the skill's specific focus on the PubNub API. - [SAFE]: All external resource references target official vendor domains (
pubnub.com,pndsn.com) or related internal skill paths, consistent with the developer's identity.
Audit Metadata