redis
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Provides standard Docker CLI commands for initializing a Redis server container with persistence and password authentication.
- [DYNAMIC_EXECUTION]: Includes a Lua script for atomic lock release in the distributed locking example. This follows the established Redlock pattern to ensure that locks are only deleted by the client that acquired them.
- [CREDENTIALS_UNSAFE]: Connection examples for Python and Node.js use clear placeholders (e.g., 'your-password') rather than hardcoded secrets.
- [INDIRECT_PROMPT_INJECTION]: The skill describes processing data from external databases and session tokens.
- Ingestion points: External data enters through
db.queryin the cache-aside pattern and session tokens in the session store example (SKILL.md). - Boundary markers: The examples use
json.dumpsandjson.loadsto maintain data structure boundaries. - Capability inventory: Capabilities are limited to standard Redis operations (
set,get,delete,zadd,eval) within a sandboxable environment. - Sanitization: Uses standard JSON serialization to escape content during storage and retrieval.
Audit Metadata