The Agent Skills Directory

[SAFE]: The skill is entirely educational, containing documentation, code examples, and configuration guides for the Trigger.dev platform. All external links and package references target the official Trigger.dev website, GitHub repositories, and npm registry.
[EXTERNAL_DOWNLOADS]: The skill instructions include standard installation commands (npm install @trigger.dev/sdk, npx trigger.dev@latest init). These are standard package management operations for a well-known service and are considered safe.
[COMMAND_EXECUTION]: Instructions describe the use of the Trigger.dev CLI (npx trigger.dev dev, npx trigger.dev deploy). These are documented developer tools for the service and do not contain malicious command injection or hidden execution patterns.
[DATA_EXFILTRATION]: While the documentation mentions the use of TRIGGER_SECRET_KEY, it correctly advises users to store these in environment variables or .env files, which is a standard security best practice. No instructions were found that attempt to exfiltrate these credentials or other sensitive data.
[OBFUSCATION]: The skill's Python update script (scripts/check-updates.py) was analyzed and found to be a benign utility for checking version staleness and file integrity. It uses standard libraries and performs no hidden operations.

trigger-dev