background-job-orchestrator

Pass

Audited by Gen Agent Trust Hub on Mar 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate educational content and utility scripts for managing background task queues.
  • [COMMAND_EXECUTION]: The skill includes a shell script (setup_bullmq.sh) and a TypeScript monitoring script (queue_health_check.ts). These are used for standard environment setup (installing npm packages) and queue monitoring, and do not execute arbitrary or dangerous commands.
  • [EXTERNAL_DOWNLOADS]: The skill uses npm install to fetch standard, well-known libraries such as bullmq, ioredis, and chalk from the official npm registry. These are necessary for the skill's stated purpose and do not represent a security risk.
  • [DATA_EXPOSURE]: The skill correctly uses environment variables (e.g., process.env.REDIS_HOST) for sensitive connection details and includes explicit warnings against logging Personally Identifiable Information (PII) in job logs.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 7, 2026, 02:35 PM