pubnub-live-betting-casino
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEDATA_EXFILTRATION
Full Analysis
- Data Exposure & Exfiltration (LOW): The skill uses the PubNub SDK to perform network operations. While these are required for real-time betting functionality, the PubNub domains are not on the predefined trusted whitelist.
- Indirect Prompt Injection (LOW): The skill processes real-time message data from external channels, creating an attack surface where malicious instructions could be embedded in game state or odds updates.
- Ingestion points: The
pubnub.addListenerfunction inSKILL.mdreceives external messages. - Boundary markers: No explicit data delimiters or 'ignore' instructions are used in the code examples.
- Capability inventory: The skill uses
pubnub.publishto send data to the network. - Sanitization: The skill mitigates this risk by explicitly requiring server-side validation through PubNub Functions and mandatory AES encryption in its Constraints section.
Audit Metadata