karafka
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is composed of documentation, configuration templates, and Ruby code snippets. No malicious instructions, obfuscation, or unauthorized access patterns were detected across the analyzed files.
- [DATA_EXPOSURE]: The skill demonstrates secure handling of sensitive information by instructing users to use environment variables (
ENV) for Kafka brokers, SSL keys, and application secrets instead of hardcoding values. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known Ruby gems including
karafkaandwaterdrop, and points to the official documentation atkarafka.io, which is the legitimate source for this framework. - [PROMPT_INJECTION]: The skill defines patterns for processing data from external Kafka topics. While this constitutes a data ingestion surface (Category 8), the provided implementation patterns use standard database ORM methods (e.g.,
insert_all,find_or_create_by!) which are designed to handle data safely.
Audit Metadata