yjs-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected during the analysis. The skill consists of best-practice guidelines and code examples for implementing real-time collaboration using the Yjs library.
- [PROMPT_INJECTION]: The instructions contained in the skill files, such as the preference for retrieval-led reasoning, are standard operational guidelines for AI agents and do not attempt to bypass safety filters or override system-level constraints.
- [EXTERNAL_DOWNLOADS]: All external references point to official documentation (yjs.dev, docs.velt.dev) or established public repositories on GitHub. The installation instructions provided for Node.js packages refer to well-known, industry-standard libraries relevant to the skill's purpose.
- [DATA_EXFILTRATION]: No evidence of hardcoded credentials, sensitive file path access, or unauthorized network operations was found. The WebSocket URLs used in code snippets are local placeholders (e.g., ws://localhost:1234).
- [OBFUSCATION]: The content is presented in clear text markdown and standard JavaScript. No hidden characters, homoglyphs, or encoded payloads were detected.
Audit Metadata