realtime
Enables real-time communication in Laravel applications using WebSockets with Laravel Reverb for event broadcasting and notifications.
Install this skill
Security score
The realtime skill was audited on May 20, 2026 and we found 19 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 60 | ```env |
Template literal with variable interpolation in command context
| 278 | window.Echo.private(`orders.${orderId}`) |
Template literal with variable interpolation in command context
| 286 | window.Echo.join(`tracking.${orderId}`) |
Template literal with variable interpolation in command context
| 293 | toast(`${user.name} está acompanhando este pedido`); |
Template literal with variable interpolation in command context
| 303 | window.Echo.private(`App.Models.User.${userId}`) |
Template literal with variable interpolation in command context
| 358 | channel: `orders.${orderId}`, |
Template literal with variable interpolation in command context
| 391 | window.Echo.private(`App.Models.User.${userId}`) |
Template literal with variable interpolation in command context
| 455 | window.Echo.join(`tracking.${orderId}`) |
Template literal with variable interpolation in command context
| 457 | .joining((user) => toast(`${user.name} está observando`)) |
Template literal with variable interpolation in command context
| 476 | window.Echo.private(`orders.${orderId}`) |
Template literal with variable interpolation in command context
| 493 | window.Echo.join(`chat.${chatId}`) |
Access to .env file
| 61 | # .env |
Access to .env file
| 259 | key: import.meta.env.VITE_REVERB_APP_KEY, |
Access to .env file
| 260 | wsHost: import.meta.env.VITE_REVERB_HOST, |
Access to .env file
| 261 | wsPort: import.meta.env.VITE_REVERB_PORT ?? 8081, |
Access to .env file
| 262 | wssPort: import.meta.env.VITE_REVERB_PORT ?? 8081, |
External URL reference
| 609 | - [Laravel Reverb Documentation](https://laravel.com/docs/reverb) - Documentação oficial |
External URL reference
| 610 | - [Laravel Broadcasting](https://laravel.com/docs/broadcasting) - Broadcasting de events |
External URL reference
| 611 | - [Laravel Echo Documentation](https://echo.laravel.com) - Cliente frontend |