📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills azure-messaging-webpubsubservice-py
📦
azure-messaging-webpubsubservice-py
Content revision r2 Medium Risk ⚙️ External commands🌐 Network access🔑 Env variables
Build Real-Time Apps with Azure Web PubSub
Real-time Python messaging requires careful token, group, connection, and permission handling. This skill provides focused Azure Web PubSub SDK patterns for common service and client workflows.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "azure-messaging-webpubsubservice-py" from https://skillstore.io/skills/sickn33-azure-messaging-webpubsubservice-py.md and its manifest at https://skillstore.io/api/skills/sickn33-azure-messaging-webpubsubservice-py/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "azure-messaging-webpubsubservice-py". Explain how to send a private update to one signed-in user.
Expected outcome:
Use the service client's user-targeted send operation with the authenticated application user ID. Select a content type and handle delivery failures.
Using "azure-messaging-webpubsubservice-py". Plan secure access for a collaborative group.
Expected outcome:
Generate a short-lived user token with only required roles, add the user to the intended group, and revoke permissions when access ends.
Security Audit
Medium Riskv5 • 7/23/2026 Open versioned report
All 38 static findings are false positives caused by Markdown fences, inline method names, placeholder Azure endpoints, and a standard environment-variable credential lookup. The examples contain no executable backtick expressions, suspicious destinations, or environment-variable exfiltration. One separate medium-risk issue remains because the token-generation example prints a client access URL that can expose its bearer credential.
1
Files scanned
254
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Client Access Token URL Printed
The token-generation example prints token['url']. Azure Web PubSub client access URLs can contain bearer credentials, so terminal or CI log capture could expose client access.
The print statement directly outputs the generated access URL. The surrounding code identifies the value as a client access token URL.
Risk Factors
⚙️ External commands (34)
SKILL.md:15-21 SKILL.md:21-25 SKILL.md:25-28 SKILL.md:28-34 SKILL.md:34-51 SKILL.md:51-55 SKILL.md:55-71 SKILL.md:71-75 SKILL.md:75-84 SKILL.md:84-88 SKILL.md:88-94 SKILL.md:94-98 SKILL.md:98-104 SKILL.md:104-108 SKILL.md:108-114 SKILL.md:114-118 SKILL.md:118-130 SKILL.md:130-134 SKILL.md:134-149 SKILL.md:149-153 SKILL.md:153-176 SKILL.md:176-180 SKILL.md:180-201 SKILL.md:201-205 SKILL.md:205-221 SKILL.md:221-227 SKILL.md:227-228 SKILL.md:228-229 SKILL.md:229-230 SKILL.md:230-231 SKILL.md:231-232 SKILL.md:232-233 SKILL.md:233-234 SKILL.md:234-235
🌐 Network access (3)
🔑 Env variables (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-azure-messaging-webpubsubservice-py/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-azure-messaging-webpubsubservice-py?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-azure-messaging-webpubsubservice-py?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-azure-messaging-webpubsubservice-py/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-azure-messaging-webpubsubservice-py.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). azure-messaging-webpubsubservice-py security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-azure-messaging-webpubsubservice-py/audits/5BibTeX citation
@techreport{sickn33-sickn33-azure-messaging-webpubsubservice-py-2026,
author = {sickn33},
title = {azure-messaging-webpubsubservice-py security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-azure-messaging-webpubsubservice-py/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "azure-messaging-webpubsubservice-py security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/sickn33-azure-messaging-webpubsubservice-py/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-azure-messaging-webpubsubservice-py:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance
What You Can Build
Add Application Notifications
Create server-side Python flows that broadcast updates or target specific users and connections.
Build Group Messaging
Implement group membership and targeted messages for rooms, teams, or collaborative sessions.
Review Access Controls
Compare token roles and connection permissions before integrating Web PubSub into an Azure architecture.
Try These Prompts
Create a Service Client
Show how to initialize an Azure Web PubSub service client in Python using DefaultAzureCredential for endpoint [endpoint] and hub [hub].
Send Targeted Messages
Design Python examples that send [message] to all clients, user [user_id], group [group], and connection [connection_id]. Explain content types.
Manage Groups and Permissions
Create a secure workflow for adding user [user_id] to group [group], granting [permission], checking access, revoking access, and removing membership.
Design an Async Messaging Service
Design an asynchronous Python Web PubSub service for [application]. Include credential lifecycle, token handling, group delivery, failure handling, cleanup, and testing considerations.
Best Practices
- Prefer DefaultAzureCredential and managed identities when the deployment environment supports them.
- Grant only required client roles and issue short-lived access tokens.
- Close asynchronous clients and credentials, and validate reconnection behavior under failure.
Avoid
- Do not print, persist, or expose generated client access URLs.
- Do not grant broad send or group permissions when a narrower role is sufficient.
- Do not use placeholder identifiers or endpoints without environment-specific validation.
Frequently Asked Questions
Does this skill deploy an Azure Web PubSub resource?
No. It explains Python SDK usage and assumes the resource, endpoint, hub, and credentials already exist.
Which authentication methods are covered?
The examples cover connection strings and DefaultAzureCredential with Microsoft Entra ID.
Can it send messages to individual recipients?
Yes. The documented service client can target a user, group, connection, or every connected client.
Does it include asynchronous Python usage?
Yes. It shows the asynchronous service client, DefaultAzureCredential, message sending, and resource cleanup.
Are generated client access URLs safe to log?
No. Treat them as secrets because they can contain bearer credentials that grant Web PubSub access.
Does it provide complete production guidance?
No. Add retry policies, observability, authorization checks, reconnection logic, load testing, and environment-specific validation.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Ref
f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526
Maintenance freshness
7/26/2026
Usage
8 downloads · 90 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
python-async-patterns
85Build Reliable Async Python
by 0xDarkMatter
Async Python code often fails due to blocking calls, unbounded tasks, and weak cleanup. This skill provides reusable asyncio patterns, examples, and references for robust concurrent services.
Coding & Development View
📦
python-fastapi-patterns
85Build FastAPI APIs with Reusable Patterns
by 0xDarkMatter
FastAPI projects need consistent choices for validation, dependencies, middleware, and background work. This skill gives Claude, Codex, and Claude Code reusable patterns for practical Python API development.
Coding & Development View
📦
python-typing-patterns
85Add Python Type Safety Patterns
by 0xDarkMatter
Python type annotations can be hard to apply consistently across real projects. This skill gives Claude, Codex, and Claude Code practical patterns for safer typed Python code.
Coding & Development View
📦
tdd-pytest
81Build Python Tests with pytest TDD
by 89jobrien
Python teams often need consistent tests, coverage, and reports without losing TDD discipline. This skill provides pytest-focused workflows, examples, and reporting guidance for Claude, Codex, and Claude Code.
Coding & Development View
📦
enact-hello-python
81Run a Python Greeting Example
by EnactProtocol
New Enact users need a small example that proves tool execution works. This skill runs a Python greeting command and returns simple runtime output.
Coding & Development View
📦
dead-code-removal
80Remove Dead Code Safely
by 89jobrien
Unused imports, functions, and classes increase maintenance cost and deployment size. This skill guides Claude, Codex, and Claude Code through conservative analysis, backups, removal, and validation.
Coding & Development View