trigger-setup
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@trigger.dev/sdkpackage from the official npm registry. Trigger.dev is a well-known service for background job processing. - [COMMAND_EXECUTION]: The documentation includes standard development commands such as
npx trigger init,npx trigger dev, andnpx trigger deploy. These are standard CLI tools provided by the service for project initialization and local development. - [CREDENTIALS_UNSAFE]: The skill identifies the need for a
TRIGGER_SECRET_KEYbut correctly advises users to manage it through environment variables or.envfiles. It explicitly recommends adding.envfiles to.gitignoreto prevent accidental exposure, which is a standard security best practice. No actual credentials or secrets are hardcoded in the skill files.
Audit Metadata