Skills configuring-dapr-pubsub
📦

configuring-dapr-pubsub

Content revision r2 High Risk ⚙️ External commands🌐 Network access

Configure Dapr Pub/Sub for Kafka and Redis

Dapr pub/sub setup can fail when components, subscriptions, sidecars, and routes do not align. This skill provides practical Kafka and Redis patterns for local and Kubernetes deployments.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "configuring-dapr-pubsub" from https://skillstore.io/skills/asmayaseen-configuring-dapr-pubsub.md and its manifest at https://skillstore.io/api/skills/asmayaseen-configuring-dapr-pubsub/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/asmayaseen-configuring-dapr-pubsub.md Signed manifest GET /api/skills/asmayaseen-configuring-dapr-pubsub/manifest Signed lockfile GET /api/skills/asmayaseen-configuring-dapr-pubsub/lockfile

Test it

Using "configuring-dapr-pubsub". Create a secure Kafka component for the payments and ledger services.

Expected outcome:

  • A component plan uses TLS, SASL authentication, and Kubernetes secret references.
  • Scopes limit access to the payments and ledger application identifiers.
  • A checklist identifies broker addresses, consumer groups, and secret names that require customization.

Using "configuring-dapr-pubsub". Troubleshoot why my inventory service receives no stock-updated events.

Expected outcome:

  • Verify that the pub/sub component name matches the subscription.
  • Compare the topic, route, application identifier, scope, and resource path.
  • Inspect Dapr sidecar metadata and logs, then publish a controlled test event.

Using "configuring-dapr-pubsub". Plan event routing from a support triage service to specialist services.

Expected outcome:

  • Separate topics route concept, debugging, and response events.
  • Each specialist subscribes only to its required topic.
  • CloudEvent identifiers and session fields support tracing and response correlation.

Security Audit

High Risk
v9 • 7/23/2026 Open versioned report

All 51 static detections are false positives. The command alerts are Markdown examples, and the network references target a local Dapr sidecar. Semantic review found insecure production Kafka defaults and unpinned container images.

2
Files scanned
477
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (2)

High
SKILL.md:16-31SKILL.md:44-59
Insecure Kafka Defaults Presented for Production
The quick start disables TLS, and the production Kafka example uses no authentication. Reuse can expose event data and permit unauthorized broker access.
The cited configuration explicitly sets disableTls to true and labels an authType none example as production guidance.
Medium
SKILL.md:273SKILL.md:381SKILL.md:395
Unpinned Container Images
Deployment examples use latest image tags for application, Dapr, and Kafka containers. Mutable tags can introduce unreviewed or incompatible images during deployment.
Each cited deployment line uses a mutable latest tag, so image contents can change without a manifest update.

Risk Factors

⚙️ External commands (41)
SKILL.md:16-32 SKILL.md:32-34 SKILL.md:34-40 SKILL.md:40-46 SKILL.md:46-76 SKILL.md:76-80 SKILL.md:80-101 SKILL.md:101-105 SKILL.md:105-120 SKILL.md:120-126 SKILL.md:126-140 SKILL.md:140-144 SKILL.md:144-178 SKILL.md:178-184 SKILL.md:184-205 SKILL.md:205-209 SKILL.md:209-224 SKILL.md:224-232 SKILL.md:232-247 SKILL.md:247-251 SKILL.md:251-279 SKILL.md:279-285 SKILL.md:285-318 SKILL.md:318-322 SKILL.md:322-354 SKILL.md:354-360 SKILL.md:360-368 SKILL.md:368-372 SKILL.md:372-397 SKILL.md:397-403 SKILL.md:403-409 SKILL.md:409-415 SKILL.md:415 SKILL.md:416-417 SKILL.md:417 SKILL.md:418-422 SKILL.md:422-428 SKILL.md:428-432 SKILL.md:432-436 SKILL.md:436-437 SKILL.md:437-438
🌐 Network access (5)
SKILL.md:335 SKILL.md:187 SKILL.md:291 SKILL.md:328 SKILL.md:408
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/asmayaseen-configuring-dapr-pubsub/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/asmayaseen-configuring-dapr-pubsub/security.svg)](https://skillstore.io/skills/asmayaseen-configuring-dapr-pubsub?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/asmayaseen-configuring-dapr-pubsub?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/asmayaseen-configuring-dapr-pubsub/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/asmayaseen-configuring-dapr-pubsub.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

Asmayaseen. (2026). configuring-dapr-pubsub security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/asmayaseen-configuring-dapr-pubsub/audits/9

BibTeX citation

@techreport{asmayaseen-asmayaseen-configuring-dapr-pubsub-2026, author = {Asmayaseen}, title = {configuring-dapr-pubsub security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/asmayaseen-configuring-dapr-pubsub/audits/9}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "configuring-dapr-pubsub security audit report (audit version 9)" version: "unspecified" type: report authors: - name: "Asmayaseen" date-released: "2026-07-23" url: "https://skillstore.io/skills/asmayaseen-configuring-dapr-pubsub/audits/9" identifiers: - type: other value: "skillstore:asmayaseen-configuring-dapr-pubsub:audit:9" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
45
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Prototype Local Event Flows

Create Redis or Kafka components, start Dapr sidecars, and test publishing between local services.

Deploy Kubernetes Microservices

Prepare component scopes, sidecar annotations, subscriptions, and deployment settings for a Kubernetes environment.

Connect Specialized Agents

Design topic routes for a triage service and specialist services using Dapr pub/sub.

Try These Prompts

Create a Local Redis Setup 
Create a Dapr Redis pub/sub component for local development. Include one declarative subscription and list the values I must customize.
Add FastAPI Publishing 
Show how my FastAPI service can publish order-created events through a local Dapr sidecar. Include error handling and a matching subscription route.
Prepare Secure Kafka Deployment 
Design a Kubernetes Dapr Kafka component using TLS, SASL, secret references, and application scopes. Explain required broker and consumer settings.
Design Multi-Service Routing 
Design Dapr topics and subscriptions for a triage service and three specialist services. Include CloudEvent fields, retry considerations, observability, and a verification plan.

Best Practices

  • Use TLS, authentication, secret references, and application scopes for production brokers.
  • Keep component names, topics, routes, scopes, and application identifiers consistent.
  • Verify sidecar registration and event flow with controlled test messages before deployment.

Avoid

  • Do not reuse unauthenticated or TLS-disabled examples in production.
  • Do not expose broker credentials directly in component manifests.
  • Do not deploy mutable latest image tags in controlled environments.

Frequently Asked Questions

Does this skill install Dapr, Kafka, or Redis?
No. It provides configuration and integration guidance for existing environments.
Can I use declarative subscriptions?
Yes. The skill covers Dapr subscription manifests with topics, routes, and application scopes.
Does it support FastAPI services?
Yes. It includes programmatic subscription handlers and publishing through the Dapr HTTP API.
Is the Kafka configuration production-ready?
Not without review. Production deployments need TLS, authentication, secret management, authorization, and pinned image versions.
Can it configure direct Kafka clients?
No. The guidance uses Dapr pub/sub abstractions instead of direct broker clients.
How does it help with troubleshooting?
It checks sidecar metadata, logs, component registration, topic routes, consumer groups, and test event delivery.

Developer Details

Author

Asmayaseen

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Repository

https://github.com/Asmayaseen/hackathon-2/tree/main/.claude/skills/configuring-dapr-pubsub

Ref

89edfdc710d0846129dcee6a929477b04f08052c

Maintenance freshness

7/24/2026

Usage

7 downloads · 190 views

File structure

📁 scripts/

📄 verify.py

📄 SKILL.md