dotnet-realtime-communication

Pass

Audited by Gen Agent Trust Hub on Feb 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: References the official Microsoft GitHub repository for the vs-streamjsonrpc library, which is a trusted source.
  • [PROMPT_INJECTION]: The Hub implementation examples (e.g., NotificationHub.SendMessage) accept untrusted string data from clients and broadcast it to other participants. This presents a surface for indirect prompt injection. 1. Ingestion points: SendMessage and UploadData methods in SKILL.md; 2. Boundary markers: Absent; 3. Capability inventory: Broadcasting messages to groups via Clients.Group().SendAsync and processing asynchronous data streams; 4. Sanitization: Not present in the provided boilerplate code snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 24, 2026, 12:10 AM