shiny-actors
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill framework facilitates processing untrusted data through multiple ingestion vectors as described in SKILL.md.
- Ingestion points: Remote HTTP actor calls via
ServeOverHttp, mDNS peer discovery data throughUseDiscovery, and durable event streams viaIActorStream. - Boundary markers: The documentation provides explicit patterns for defining
authorizationPoliciesand usingExpose<T>callbacks to validate callers and filter access to actor methods. - Capability inventory: Actor implementations can perform persistent state writes using
WriteStateAsyncandAutoSave, which could be influenced by malicious inputs if not properly authorized. - Sanitization: The skill mandates the use of
JsonSerializerContextfor source-generated, typed serialization, which mitigates risks associated with unsafe reflection-based deserialization. - [EXTERNAL_DOWNLOADS]: The documentation references official framework packages available via NuGet, such as
Shiny.Actors.DocumentDbandShiny.Actors.HttpServer, for extending framework functionality.
Audit Metadata