Skip to main content

sse-resilience

Manages Redis-backed SSE streams with monitoring and recovery features to ensure reliable event delivery and resource management.

Install this skill

or
0/100

Security score

The sse-resilience skill was audited on Feb 15, 2026 and we found 14 security issues across 1 threat category, including 3 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 99

Direct command execution function call

SourceSKILL.md
99await pipeline.exec();
high line 114

Direct command execution function call

SourceSKILL.md
114await pipeline.exec();
high line 128

Direct command execution function call

SourceSKILL.md
128await pipeline.exec();
medium line 79

Template literal with variable interpolation in command context

SourceSKILL.md
79const streamKey = `${STREAM_KEY_PREFIX}${metadata.streamId}`;
medium line 104

Template literal with variable interpolation in command context

SourceSKILL.md
104const streamKey = `${STREAM_KEY_PREFIX}${streamId}`;
medium line 120

Template literal with variable interpolation in command context

SourceSKILL.md
120const streamKey = `${STREAM_KEY_PREFIX}${streamId}`;
medium line 149

Template literal with variable interpolation in command context

SourceSKILL.md
149const streamKey = `${STREAM_KEY_PREFIX}${streamId}`;
medium line 164

Template literal with variable interpolation in command context

SourceSKILL.md
164const key = `${COMPLETION_KEY_PREFIX}${data.streamId}`;
medium line 176

Template literal with variable interpolation in command context

SourceSKILL.md
176const key = `${COMPLETION_KEY_PREFIX}${streamId}`;
medium line 229

Template literal with variable interpolation in command context

SourceSKILL.md
229console.log(`Handling orphaned stream: ${stream.streamId}`);
medium line 247

Template literal with variable interpolation in command context

SourceSKILL.md
247`data: ${JSON.stringify({
medium line 272

Template literal with variable interpolation in command context

SourceSKILL.md
272encoder.encode(`data: ${JSON.stringify({ type: 'connected', streamId })}\n\n`)
medium line 314

Template literal with variable interpolation in command context

SourceSKILL.md
314const recovery = await fetch(`/api/stream/${streamId}/recover`);
medium line 325

Template literal with variable interpolation in command context

SourceSKILL.md
325eventSource = new EventSource(`/api/stream/${streamId}`);
Scanned on Feb 15, 2026
View Security Dashboard