skills/valentinkolb/sync/sync-queue/Gen Agent Trust Hub

sync-queue

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the @valentinkolb/sync and zod Node.js packages. These libraries are either vendor-owned by the author or well-known, trusted industry standards.
  • [PROMPT_INJECTION]: The skill implements an indirect prompt injection surface through message queue processing. Ingestion points: Data payloads are processed via the send(), recv(), and stream() methods as documented in references/api.md. Boundary markers: The implementation relies on strict Zod schema validation to define and enforce data structures. Capability inventory: The skill defines high-level API interactions for queuing and does not expose dangerous capabilities such as subprocess execution or direct file-system access. Sanitization: All payloads are validated and parsed using Zod at both the entry (production) and exit (consumption) stages, providing robust protection against malformed or malicious data.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 02:31 PM