redis-streams-rails
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for consuming data from external Redis streams, which introduces a surface for indirect prompt injection if the message payloads contain instructions.
- Ingestion points: The
processmethod inStreamConsumer(SKILL.md) reads and parsesfields["payload"]from the Redis stream. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are included in the code template.
- Capability inventory: The consumer script has capabilities to perform database transactions, create records, and report errors to the Rails environment.
- Sanitization: The input is parsed as JSON, but the internal contents of the payload are not explicitly sanitized before being passed to business logic.
- [EXTERNAL_DOWNLOADS]: The skill mentions external dependencies and links to reputable sources.
- Evidence: References the standard
redisandconnection_poolRuby gems for installation. - Evidence: Provides links to official documentation at redis.io and the official redis-rb GitHub repository.
Audit Metadata