sync-queue
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
@valentinkolb/syncandzodNode.js packages. These libraries are either vendor-owned by the author or well-known, trusted industry standards. - [PROMPT_INJECTION]: The skill implements an indirect prompt injection surface through message queue processing. Ingestion points: Data payloads are processed via the
send(),recv(), andstream()methods as documented inreferences/api.md. Boundary markers: The implementation relies on strict Zod schema validation to define and enforce data structures. Capability inventory: The skill defines high-level API interactions for queuing and does not expose dangerous capabilities such as subprocess execution or direct file-system access. Sanitization: All payloads are validated and parsed using Zod at both the entry (production) and exit (consumption) stages, providing robust protection against malformed or malicious data.
Audit Metadata