azure-web-pubsub-ts
Pass
Audited by Gen Agent Trust Hub on Feb 19, 2026
Risk Level: SAFE
Full Analysis
- [Data Exposure & Exfiltration] (SAFE): The skill follows best practices for secret management by using environment variables and Azure's DefaultAzureCredential. Network communication is directed to legitimate Azure service endpoints.
- [Unverifiable Dependencies & Remote Code Execution] (SAFE): All dependencies are official, trusted packages from the @azure scope on npm. No dynamic code execution or remote script fetches were detected.
- [Indirect Prompt Injection] (SAFE): The skill provides surface areas for external data ingestion through event handlers, but does not implement unsafe prompt interpolation or dangerous execution sinks.
- [Privilege Escalation] (SAFE): No commands for privilege escalation or unauthorized system modifications were found.
Audit Metadata