websocket-builder
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a template for generating secure WebSocket server code in Node.js, Python, and Go.
- [SAFE]: It explicitly recommends critical security measures, such as performing authentication during the initial handshake (JWT validation) rather than after the connection is established.
- [SAFE]: It promotes defensive programming by advising on message size limits, connection limits per user, and rigorous validation of all incoming client data.
- [SAFE]: All referenced libraries (ws, websockets, gorilla/websocket, ioredis) are mature, industry-standard tools for their respective ecosystems.
Audit Metadata