api-database-upstash
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill promotes secure credential management by instructing users to use environment variables and
Redis.fromEnv()instead of hardcoding secrets. - [SAFE]: Documentation includes examples for verifying QStash webhook signatures using the
Receiverutility, which is a best practice for preventing spoofing attacks. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for reading data from external sources (Redis and webhooks), representing an attack surface for indirect prompt injection. This is a common characteristic of data-integrating skills.
- Ingestion points:
redis.getinexamples/core.mdand QStash webhook bodies inexamples/qstash.md. - Boundary markers: Absent from basic code snippets.
- Capability inventory: The skill does not define its own sensitive capabilities but operates within the agent's tool environment.
- Sanitization: Signature verification for incoming QStash messages is explicitly documented.
Audit Metadata