pubnub-illuminate
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: No hardcoded secrets or API keys were detected. The skill correctly instructs users to manage the 'ILLUMINATE_API_KEY' via environment variables or secret managers and includes warnings against committing credentials to source control.
- [EXTERNAL_DOWNLOADS]: All identified network activity is directed toward official PubNub administrative endpoints ('admin-api.pubnub.com'), which are well-known vendor resources corresponding to the skill's stated purpose.
- [PROMPT_INJECTION]: The instructions do not contain any patterns attempting to override agent behavior, bypass safety filters, or extract system prompts.
- [REMOTE_CODE_EXECUTION]: No remote code execution vulnerabilities were found. The skill relies on standard API interactions and provides guidelines for building resources rather than executing arbitrary external scripts.
- [DATA_EXFILTRATION]: There is no evidence of data exfiltration. The skill is designed to manage analytics configurations within the PubNub ecosystem, and no unauthorized data transmission patterns were observed.
- [COMMAND_EXECUTION]: The skill uses the 'manage_illuminate' MCP tool for administrative tasks, which is an expected and safe interaction for this integration. No unsafe shell command injections or '!' execution patterns were found.
Audit Metadata