karafka

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is composed of documentation, configuration templates, and Ruby code snippets. No malicious instructions, obfuscation, or unauthorized access patterns were detected across the analyzed files.
  • [DATA_EXPOSURE]: The skill demonstrates secure handling of sensitive information by instructing users to use environment variables (ENV) for Kafka brokers, SSL keys, and application secrets instead of hardcoding values.
  • [EXTERNAL_DOWNLOADS]: The skill references standard, well-known Ruby gems including karafka and waterdrop, and points to the official documentation at karafka.io, which is the legitimate source for this framework.
  • [PROMPT_INJECTION]: The skill defines patterns for processing data from external Kafka topics. While this constitutes a data ingestion surface (Category 8), the provided implementation patterns use standard database ORM methods (e.g., insert_all, find_or_create_by!) which are designed to handle data safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 04:36 AM
Security Audit — agent-trust-hub — karafka