camunda7

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions and configuration specify the installation of standard BPMN processing libraries (bpmn-auto-layout, bpmn-moddle, camunda-bpmn-moddle) from the official npm registry (npmjs.org). These are well-known packages used for BPMN XML manipulation.
  • [COMMAND_EXECUTION]: The skill provides a bundled Node.js CLI utility (scripts/camunda-tool.mjs) used to perform technical tasks such as structural validation, layout regeneration, and execution-readiness linting of BPMN files. These operations are executed locally and are restricted to the files within the user's project directory.
  • [DATA_EXFILTRATION]: No evidence of network exfiltration or unauthorized access to sensitive system files was found. The skill's operations are focused on processing local BPMN models and project-specific catalogs.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 08:20 AM
Security Audit — agent-trust-hub — camunda7