pubnub-events-and-actions
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and implementation guidelines for integrating PubNub with external services such as AWS and Kafka using secure, established patterns.
- [CREDENTIALS_UNSAFE]: The documentation identifies hardcoded credentials as a major anti-pattern and recommends secure alternatives such as environment variables and least-privilege IAM users. It correctly uses template placeholders in example URIs.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the routing of untrusted external data (PubNub event payloads). While no explicit sanitization for message content is described, the skill focuses on configuration and routing rather than autonomous processing of data by the LLM. Ingestion points include Messages and User metadata; capabilities include network egress (Webhooks) and file storage (S3).
- [DATA_EXFILTRATION]: The core purpose of the skill is data routing. It provides clear security guidance for using webhooks and cloud targets, including requirements for HTTPS transport and IP allowlisting for egress traffic.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or suspicious script downloads were detected. The recommended libraries (Express, LRU) and tools are industry-standard for the described integration use cases.
Audit Metadata