websocket-engineer
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a high-quality developer reference for WebSocket implementation and scaling. It does not contain any malicious instructions, prompt injections, or hidden payloads.
- [SAFE]: The skill explicitly teaches and includes security best practices, such as JWT authentication, distributed rate limiting with Redis, and XSS protection via input sanitization using
sanitize-html. - [SAFE]: All referenced Node.js packages are industry-standard libraries (e.g.,
socket.io,redis,jsonwebtoken,express). - [SAFE]: Sensitive configuration handling is demonstrated using best practices, such as loading secrets (JWT_SECRET, REDIS_URL) from environment variables rather than hardcoding them.
- [SAFE]: No patterns of data exfiltration, obfuscation, or unauthorized command execution were found. The use of
npx wscatis a standard developer tool for local testing and is safe.
Audit Metadata