Developing with Redis
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates the ingestion of data from Redis into the agent context, creating a surface for indirect prompt injection.
- Ingestion points: Data is retrieved in the
getOrSetfunction and thecheckRateLimitpattern. - Boundary markers: There are no explicit delimiters or boundary markers used when the agent processes the retrieved data.
- Capability inventory: The skill uses network operations to connect to Redis and performs JSON parsing on the results.
- Sanitization: No sanitization or validation is applied to the data retrieved from Redis before it is used.
- [EXTERNAL_DOWNLOADS]: The skill references the
ioredislibrary, which is a well-known and standard package for Node.js Redis integration. - [COMMAND_EXECUTION]: The skill implements a distributed lock pattern using a Redis Lua script executed via
redis.eval. This is a standard and safe practice for ensuring atomicity in Redis operations.
Audit Metadata