redis-streams-rails

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for consuming data from external Redis streams, which introduces a surface for indirect prompt injection if the message payloads contain instructions.
  • Ingestion points: The process method in StreamConsumer (SKILL.md) reads and parses fields["payload"] from the Redis stream.
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands are included in the code template.
  • Capability inventory: The consumer script has capabilities to perform database transactions, create records, and report errors to the Rails environment.
  • Sanitization: The input is parsed as JSON, but the internal contents of the payload are not explicitly sanitized before being passed to business logic.
  • [EXTERNAL_DOWNLOADS]: The skill mentions external dependencies and links to reputable sources.
  • Evidence: References the standard redis and connection_pool Ruby gems for installation.
  • Evidence: Provides links to official documentation at redis.io and the official redis-rb GitHub repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 02:26 AM