real-time-features
Enables real-time functionality in applications using WebSockets and SSE for instant updates in chat, dashboards, and collaborative tools.
Install this skill
Security score
The real-time-features skill was audited on Mar 1, 2026 and we found 16 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 69 | console.log(`WebSocket server running on port ${port}`); |
Template literal with variable interpolation in command context
| 79 | console.log(`New connection: ${clientId}`); |
Template literal with variable interpolation in command context
| 95 | console.error(`WebSocket error for ${clientId}:`, error); |
Template literal with variable interpolation in command context
| 222 | console.log(`Client disconnected: ${clientId}`); |
Template literal with variable interpolation in command context
| 320 | `Reconnecting... (${reconnectCountRef.current}/${reconnectAttempts})` |
Template literal with variable interpolation in command context
| 443 | console.log(`Client ${id} connected. Total: ${this.clients.length}`); |
Template literal with variable interpolation in command context
| 448 | console.log(`Client ${id} disconnected. Total: ${this.clients.length}`); |
Template literal with variable interpolation in command context
| 454 | client.res.write(`data: ${JSON.stringify(data)}\n\n`); |
Template literal with variable interpolation in command context
| 459 | const message = `data: ${JSON.stringify(data)}\n\n`; |
Template literal with variable interpolation in command context
| 468 | const message = `event: ${event}\ndata: ${JSON.stringify(data)}\n\n`; |
Template literal with variable interpolation in command context
| 595 | console.log(`User connected: ${socket.id}`); |
Template literal with variable interpolation in command context
| 626 | console.log(`User disconnected: ${socket.id}`); |
Access to .env file
| 577 | origin: process.env.CLIENT_URL || 'http://localhost:3000', |
External URL reference
| 557 | client.connect('http://localhost:3000/events', { |
External URL reference
| 577 | origin: process.env.CLIENT_URL || 'http://localhost:3000', |
External URL reference
| 701 | - [Socket.IO Documentation](https://socket.io/docs/) |
Install this skill with one command
/learn @opendcai/real-time-features