inngest
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents how to build workflows that process external events, which is an inherent attack surface for indirect prompt injection. Evidence: (1) Ingestion points:
inngest.createFunctionhandlers receive untrusted event data (documented inreferences/00-overview.md). (2) Boundary markers: The documentation advocates for Zod schema validation to define strict data boundaries (documented inreferences/12-typescript-patterns.md). (3) Capability inventory: Workflows can perform database writes and API calls usingstep.run(documented inreferences/03-steps-workflows.md). (4) Sanitization: Best practices for data validation and type-safe event handling are covered throughout the references. - [EXTERNAL_DOWNLOADS]: The maintenance script
scripts/check-updates.pyperforms a network request toregistry.npmjs.orgto retrieve the latest version of theinngestpackage. This is a standard maintenance task using a well-known service.
Audit Metadata