pubnub-live-betting-casino
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements best-practice security patterns for financial and real-time gaming applications. It emphasizes the use of PubNub's built-in AES-256 encryption (
cipherKey) and Access Manager (authKey) to protect sensitive wager and balance data in transit and at rest. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted client data (wagers). It correctly mitigates the associated risks by instructing developers to never trust client-side data and providing robust server-side validation logic within PubNub Functions (Before/After Publish handlers), such as stake limit enforcement and odds drift thresholds.
- [DATA_EXFILTRATION]: While the skill includes examples of network operations to external services (e.g., geocoding services for geo-fencing), these are legitimate architectural requirements for regulatory compliance. The implementations use secure server-side execution environments (PubNub Functions) rather than client-side exfiltration.
- [REMOTE_CODE_EXECUTION]: The skill uses official, well-known libraries (
pubnub) and provides patterns for serverless logic (PubNub Functions). It does not include any suspicious remote script execution (e.g., curl-to-bash) or dynamic execution of untrusted code strings.
Audit Metadata