upstash-redis-js
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides tools for retrieving data from external Redis databases, which acts as an ingestion point for potentially untrusted data into the agent's context.
- Ingestion points: Data retrieval commands such as
redis.get(strings.md),redis.json.get(json.md),index.query(querying.md), andxread(streams.md) ingest content from external database keys. - Boundary markers: The documentation does not include specific boundary markers or instructions to the agent to treat retrieved content as untrusted data rather than instructions.
- Capability inventory: The skill enables network communication with the Upstash Redis REST API. AI agents using this skill often have additional capabilities such as file system access or command execution.
- Sanitization: The guides focus on standard data access patterns and do not explicitly cover sanitization or validation logic for the retrieved content.
- [EXTERNAL_DOWNLOADS]: The skill references and provides installation instructions for official packages and resources from trusted sources.
- Evidence: Mentions and provides installation commands for official packages including
@upstash/redis,@upstash/ratelimit,redis, andioredisfrom the public NPM registry. - Evidence: References official documentation and GitHub repositories within the
upstashandupstashdatabaseorganizations. - [SAFE]: The skill demonstrates secure management of sensitive information and database interactions.
- Evidence: Recommends using environment variables for the
UPSTASH_REDIS_REST_URLandUPSTASH_REDIS_REST_TOKENrather than hardcoding credentials. - Evidence: Highlights the
Redis.fromEnv()initialization method as a best-practice pattern for initializing the client securely.
Audit Metadata