pubnub/pubnub-functions
Create, configure, and deploy PubNub Functions 2.0 event handlers, triggers, and serverless endpoints. Use when building real-time message transformations, PubNub modules, webhook integrations, or edge data processing.
98
100%
Does it follow best practices?
Impact
98%
1.84xAverage score across 10 eval scenarios
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk)
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Third-party content exposure detected (high risk: 0.90). The skill's docs and required examples explicitly use the XHR module to fetch external URLs (see references/functions-modules.md and references/functions-patterns.md — e.g., xhr.fetch('https://api.moderation.example.com/check')) and then act on the returned JSON (blocking or allowing messages), so untrusted third-party responses can directly influence runtime decisions.
- Audited
- Security analysis