background-job-processing
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates secure configuration practices by using environment variables (
os.getenvin Python andprocess.envin Node.js) for sensitive connection strings like Redis URLs. - [SAFE]: The provided code examples utilize standard, well-known libraries (Celery, Bull, Sidekiq) and explicitly configure safe serialization formats (JSON), which mitigates risks associated with unsafe data deserialization.
- [SAFE]: The shell script
scripts/health-check.shis a benign template for service monitoring and does not contain any privilege escalation or malicious command execution patterns. - [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external data (e.g., email content, report parameters). While the templates are safe, users implementing these systems should be aware that processing untrusted data in background tasks constitutes a potential attack surface that requires proper sanitization in the final application logic.
Audit Metadata