cometchat-core
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: Indirect prompt injection surface detected. The skill facilitates the handling of untrusted data from external chat messages which could contain malicious instructions.
- Ingestion points: The skill processes chat messages and user data using
@cometchat/chat-sdk-javascripttypes such asCometChat.BaseMessageandCometChat.TextMessageas described in SKILL.md. - Boundary markers: None identified. There are no instructions for using delimiters or warnings to ignore embedded instructions within the message data.
- Capability inventory: The agent has access to powerful tools including
executeBash,readFile,fileSearch, andlistDirectoryas defined in the frontmatter. - Sanitization: No sanitization, escaping, or validation of the incoming chat content is mentioned before it enters the agent's context.
- [REMOTE_CODE_EXECUTION]: Instructions involve the download and execution of vendor-specific tooling and resources.
- Recommends the installation of vendor CLI tools via
npx @cometchat/skills-cli production-authfor authentication setup. - Suggests adding a remote Model Context Protocol (MCP) server from
https://www.cometchat.com/docs/mcpto access live documentation.
Audit Metadata