pubnub-keyset-management
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a defensive and administrative resource that provides documentation and tools for secure PubNub project management. It includes best practices for rotating keys, isolating development and production environments, and avoiding hardcoded secrets.\n- [COMMAND_EXECUTION]: The skill's documentation provides code snippets and instructions for using command-line utilities such as
gitfor pre-commit security hooks and auditing tools likegitleaksortruffleHog. These tools are presented in the context of improving repository hygiene and are intended for manual developer integration.\n- [INDIRECT_PROMPT_INJECTION]: \n - Ingestion points: The skill manages configuration based on user-supplied application names and environment strings (e.g., 'dev', 'staging', 'prod').\n
- Boundary markers: The provided initialization logic uses standard string interpolation without explicit delimiters to separate user data from commands.\n
- Capability inventory: The skill utilizes administrative MCP tools (
manage_apps,manage_keysets) which have the authority to modify PubNub application settings and keyset configurations.\n - Sanitization: Included code examples demonstrate basic input sanitization through uppercase conversion and character substitution (replacing hyphens with underscores) when deriving environment variable keys from user input.
Audit Metadata