📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills azure-web-pubsub-ts
📦
azure-web-pubsub-ts
Content revision r2 High Risk ⚙️ External commands🌐 Network access🔑 Env variables
Build Azure Web PubSub Apps with TypeScript
Real-time TypeScript applications require secure connection, messaging, and event handling patterns. This skill provides focused Azure Web PubSub examples for clients, servers, groups, and Express handlers.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "azure-web-pubsub-ts" from https://skillstore.io/skills/sickn33-azure-web-pubsub-ts.md and its manifest at https://skillstore.io/api/skills/sickn33-azure-web-pubsub-ts/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "azure-web-pubsub-ts". How should a browser connect to Azure Web PubSub?
Expected outcome:
Use an authenticated same-origin negotiation endpoint to issue a short-lived client URL. Register lifecycle and message handlers before starting the client.
Using "azure-web-pubsub-ts". How can the server target messages?
Expected outcome:
- Broadcast to all connections when every subscriber needs the update.
- Target a user when all sessions for one identity should receive it.
- Target a group for room, tenant, or topic delivery.
Using "azure-web-pubsub-ts". What should I review before production?
Expected outcome:
Verify Entra ID usage, token scope and expiration, authenticated negotiation, input validation, reconnection behavior, logging redaction, and integration tests.
Security Audit
High Riskv5 • 8/14/2026 Open versioned report
All 47 static alerts are false positives caused by Markdown fences, TypeScript template literals, placeholder URLs, intended SDK networking, or named environment configuration. Semantic review found two high-risk documentation patterns: logging a bearer-token URL and showing a negotiation route without demonstrated authentication.
1
Files scanned
321
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Client Access Token URL Logged
The example logs token.url, whose own comment shows an access_token query parameter. Logs can expose this bearer credential to operators or log systems.
The documented value is a WebSocket URL containing access_token, and the next statement writes it to the console. This is direct credential disclosure.
High
Negotiation Route Does Not Demonstrate Authentication
The Express route issues a client access URL while using an optional user identity and showing no authentication check. Copied code could grant anonymous service access.
The complete route example calls getClientAccessToken without rejecting an absent user. External middleware could exist, but none is shown in this copyable example.
Risk Factors
⚙️ External commands (35)
SKILL.md:15-24 SKILL.md:24-28 SKILL.md:28-31 SKILL.md:31-37 SKILL.md:37-60 SKILL.md:60-64 SKILL.md:64-85 SKILL.md:85-89 SKILL.md:89-104 SKILL.md:104-108 SKILL.md:108-123 SKILL.md:123-127 SKILL.md:127-140 SKILL.md:140-146 SKILL.md:146-163 SKILL.md:163-167 SKILL.md:167-171 SKILL.md:171-175 SKILL.md:175-191 SKILL.md:191-195 SKILL.md:195-198 SKILL.md:198-202 SKILL.md:202-211 SKILL.md:211-215 SKILL.md:215-220 SKILL.md:220-222 SKILL.md:222-226 SKILL.md:226-250 SKILL.md:250-251 SKILL.md:251-256 SKILL.md:256-260 SKILL.md:260-275 SKILL.md:275-279 SKILL.md:279-303 SKILL.md:303-307
🌐 Network access (3)
🔑 Env variables (6)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-azure-web-pubsub-ts/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-azure-web-pubsub-ts?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-azure-web-pubsub-ts?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-azure-web-pubsub-ts/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-azure-web-pubsub-ts.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). azure-web-pubsub-ts security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-azure-web-pubsub-ts/audits/5BibTeX citation
@techreport{sickn33-sickn33-azure-web-pubsub-ts-2026,
author = {sickn33},
title = {azure-web-pubsub-ts security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-azure-web-pubsub-ts/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "azure-web-pubsub-ts security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-08-14"
url: "https://skillstore.io/skills/sickn33-azure-web-pubsub-ts/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-azure-web-pubsub-ts:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance
What You Can Build
Prototype a Team Chat
Create group-based messaging, authenticated connections, and browser event handlers for a TypeScript chat prototype.
Add Operational Notifications
Send targeted updates to users, connections, or filtered audiences from an Azure-hosted service.
Review Web PubSub Integration
Compare token, permission, connection, and event-handler patterns before approving an implementation.
Try These Prompts
Create a Basic Client
Show a minimal TypeScript Azure Web PubSub client that obtains a URL from an authenticated negotiate endpoint and handles group messages.
Design Group Messaging
Design TypeScript server and client flows for joining named groups, sending messages, preventing echoes, and handling reconnection failures.
Secure Token Negotiation
Review my Azure Web PubSub negotiate flow. Recommend authentication, least-privilege roles, expiration, error handling, and controls that prevent token exposure.
Plan a Production Integration
Produce an implementation plan for Azure Web PubSub with TypeScript and Express, including identity, authorization, groups, observability, scaling, failure handling, and tests.
Best Practices
- Prefer DefaultAzureCredential and managed identities instead of long-lived connection strings.
- Authenticate negotiation requests and issue short-lived tokens with only required roles and groups.
- Register handlers before connecting, validate event data, and test reconnect and rejoin failures.
Avoid
- Do not log client access URLs because they contain bearer tokens.
- Do not expose a negotiation endpoint without authentication and authorization.
- Do not grant broad send, group, or connection permissions when narrower access is sufficient.
Frequently Asked Questions
Which Azure packages does this skill cover?
It covers the server, browser client, identity, and Express event-handler packages for Azure Web PubSub.
Does it provision an Azure Web PubSub resource?
No. Provisioning, role assignments, networking, and deployment remain environment-specific tasks.
Which authentication method is recommended?
Use DefaultAzureCredential with managed identity for production when your hosting environment supports it.
Can it generate client access tokens?
Yes. It explains user identities, roles, initial groups, and expiration settings for generated tokens.
Does it include authorization middleware?
No. The application must authenticate negotiation requests and enforce its own user and group policies.
Are the examples production ready?
No. Add validation, redacted logging, observability, error handling, rate limits, secure configuration, and tests before production use.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Repository
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/azure-web-pubsub-tsRef
5a26d1d61d694db29af9b138c661c1981076d9df
Maintenance freshness
8/15/2026
Usage
6 downloads · 86 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
playwright-testing
86Build Reliable Playwright Tests
by C0ntr0lledCha0s
Playwright test suites can become flaky, slow, and difficult to maintain. This skill provides practical patterns for locators, fixtures, page objects, debugging, mocking, and configuration.
Coding & Development View
📦
starknet-js
83Build Starknet Apps with starknet.js
by internet-court
Starknet integrations require precise provider, account, transaction, and fee handling across several APIs. This skill provides focused starknet.js v9.x patterns for reliable TypeScript applications.
Coding & Development View
📦
vue-best-practices
82Improve Vue 3 Code Quality
by vuejs-ai
Vue projects often collect reactivity, component, and performance mistakes over time. This skill gives targeted Vue 3 guidance for safer patterns and clearer code.
Coding & Development View
📦
react-dev
82Build Type-Safe React Components
by softaworks
React TypeScript work often needs precise event, hook, and route types. This skill provides focused patterns for typed components, React 19 APIs, and routing.
Coding & Development View
📦
vue-options-api-best-practices
81Improve Vue Options API Code
by vuejs-ai
Vue Options API projects often lose type safety and correct this binding. This skill gives focused rules for safer Vue 3 components.
Coding & Development View
📦
senior-frontend
81Build Frontend Apps Faster
by davila7
Frontend work often needs consistent React patterns, performance checks, and project scaffolding. This skill gives Claude and compatible agents practical guidance and local helper scripts for modern web application development.
Coding & Development View