chat-room
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides users to install various RivetKit development packages and CLI tools from official registries and GitHub. These resources are provided by the skill's author (rivet-dev) or represent well-known technology providers and are used for project setup, orchestration, and deployment.
- [PROMPT_INJECTION]: The chat room implementation ingests untrusted text data via the sendMessage action, which is stored in a SQLite database and broadcast to other clients. This creates an attack surface for indirect prompt injection. The skill mitigates this risk by providing a security checklist that advises implementing authentication, input length constraints, and parameterized queries before production deployment.
Audit Metadata