Skip to main content

federation

Explains the ActivityPub protocol and federation concepts for implementing and debugging decentralized social networking features.

Install this skill

or
63/100

Security score

The federation skill was audited on Feb 19, 2026 and we found 29 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 287

Curl to non-GitHub URL

SourceSKILL.md
287curl https://site.com/.well-known/webfinger?resource=acct:[email protected]
medium line 290

Curl to non-GitHub URL

SourceSKILL.md
290curl https://site.com/.well-known/nodeinfo
low line 35

External URL reference

SourceSKILL.md
35"@context": "https://www.w3.org/ns/activitystreams",
low line 37

External URL reference

SourceSKILL.md
37"id": "https://example.com/@alice",
low line 38

External URL reference

SourceSKILL.md
38"inbox": "https://example.com/@alice/inbox",
low line 39

External URL reference

SourceSKILL.md
39"outbox": "https://example.com/@alice/outbox",
low line 40

External URL reference

SourceSKILL.md
40"followers": "https://example.com/@alice/followers",
low line 41

External URL reference

SourceSKILL.md
41"following": "https://example.com/@alice/following",
low line 72

External URL reference

SourceSKILL.md
72Special collection: `https://www.w3.org/ns/activitystreams#Public`
low line 85

External URL reference

SourceSKILL.md
85"actor": "https://example.com/@alice",
low line 98

External URL reference

SourceSKILL.md
98"actor": "https://example.com/@alice",
low line 99

External URL reference

SourceSKILL.md
99"object": "https://other.example/@bob"
low line 110

External URL reference

SourceSKILL.md
110"actor": "https://example.com/@alice",
low line 111

External URL reference

SourceSKILL.md
111"object": "https://other.example/@bob/post/123"
low line 120

External URL reference

SourceSKILL.md
120"actor": "https://example.com/@alice",
low line 121

External URL reference

SourceSKILL.md
121"object": "https://other.example/@bob/post/123"
low line 141

External URL reference

SourceSKILL.md
141"actor": "https://example.com/@alice",
low line 144

External URL reference

SourceSKILL.md
144"id": "https://example.com/@alice/follow/123"
low line 165

External URL reference

SourceSKILL.md
165- Content-Type: `application/ld+json; profile="https://www.w3.org/ns/activitystreams"`
low line 202

External URL reference

SourceSKILL.md
202"to": ["https://www.w3.org/ns/activitystreams#Public"],
low line 203

External URL reference

SourceSKILL.md
203"cc": ["https://example.com/@alice/followers"]
low line 210

External URL reference

SourceSKILL.md
210"to": ["https://example.com/@alice/followers"]
low line 217

External URL reference

SourceSKILL.md
217"to": ["https://other.example/@bob"],
low line 284

External URL reference

SourceSKILL.md
284https://site.com/@username
low line 287

External URL reference

SourceSKILL.md
287curl https://site.com/.well-known/webfinger?resource=acct:[email protected]
low line 290

External URL reference

SourceSKILL.md
290curl https://site.com/.well-known/nodeinfo
low line 313

External URL reference

SourceSKILL.md
313- [ActivityPub Spec](https://www.w3.org/TR/activitypub/)
low line 314

External URL reference

SourceSKILL.md
314- [ActivityStreams Vocabulary](https://www.w3.org/TR/activitystreams-vocabulary/)
low line 316

External URL reference

SourceSKILL.md
316- [FEPs Repository](https://codeberg.org/fediverse/fep)
Scanned on Feb 19, 2026
View Security Dashboard
Installation guide →