chat-sdk
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [Official Package Integration]: The skill utilizes the chat and @chat-adapter/* package ecosystem. These resources are associated with the vendor and are appropriate for implementing the multi-platform bot logic described.\n- [External Service Connectivity]: The guidance includes patterns for connecting to various third-party chat services. While these integrations involve processing external data, the skill follows standard industry practices for managing these connections and service-specific requirements.\n- [Secure Configuration]: The skill recommends using environment variables for sensitive configuration values like API tokens and signing secrets, which is a standard best practice for securing application credentials.\n- [Data Ingestion and Processing]: The skill handles data from various messaging platforms (e.g., in bot.onNewMention and bot.onSubscribedMessage). While it has the capability to interact with users (e.g., via thread.post or event.openModal), it does not define specific boundary markers or sanitization logic in this high-level documentation. This is typical for SDK guidance, and developers should implement their own input validation when building their bots.
Audit Metadata