trigger-setup

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @trigger.dev/sdk package from the official npm registry. Trigger.dev is a well-known service for background job processing.
  • [COMMAND_EXECUTION]: The documentation includes standard development commands such as npx trigger init, npx trigger dev, and npx trigger deploy. These are standard CLI tools provided by the service for project initialization and local development.
  • [CREDENTIALS_UNSAFE]: The skill identifies the need for a TRIGGER_SECRET_KEY but correctly advises users to manage it through environment variables or .env files. It explicitly recommends adding .env files to .gitignore to prevent accidental exposure, which is a standard security best practice. No actual credentials or secrets are hardcoded in the skill files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 04:17 PM
Security Audit — agent-trust-hub — trigger-setup