inngest-events
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and TypeScript code examples for using the Inngest platform. No malicious patterns or security risks were identified.
- [SAFE]: References official documentation from the vendor's website at
inngest.com. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates functions that process external events and system errors, which represents a potential injection surface. However, this behavior is central to the skill's purpose and follows standard implementation patterns.
- Ingestion points: System failure events (
inngest/function.failed) and external event matching (step.waitForEvent) inSKILL.md. - Boundary markers: No explicit boundary markers or instructions to ignore embedded content are shown in the logic processing event data.
- Capability inventory: Uses
inngest.send,step.run, andalerting.sendAlertinSKILL.mdto interact with external systems based on event content. - Sanitization: No validation or sanitization of external event data or error strings is demonstrated.
Audit Metadata