trigger-tasks
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the use of the
@trigger.dev/sdkandzodNode.js packages. These are standard, well-known libraries for background task management and data validation. - [DATA_EXFILTRATION]: Network operations are mentioned in the context of
retry.fetchand task triggering. The examples use placeholder domains (e.g.,api.example.com) and are consistent with the skill's purpose of managing external API interactions and workflows. - [INDIRECT_PROMPT_INJECTION]: The skill describes an attack surface where tasks process external data payloads.
- Ingestion points: Task definitions in
SKILL.mdandreferences/basic-tasks.mdreceive apayloadobject from external triggers. - Boundary markers: Code examples do not explicitly demonstrate the use of delimiters for untrusted payload content.
- Capability inventory: The skill utilizes
retry.fetchfor network requests andtasks.triggerfor spawning additional processes. - Sanitization: The skill promotes the use of
zodfor schema validation (viaschemaTask), which ensures data structure integrity but does not perform semantic content sanitization for downstream LLM consumption.
Audit Metadata