camunda-c8ctl
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands and the
c8ctlCLI to manage local development environments and Camunda 8 clusters. It provides clear instructions for installing the CLI via npm and monitoring process instances. - [CREDENTIALS_SAFE]: The skill follows security best practices by instructing users to manage secrets in a
.envfile that should be excluded from version control via.gitignore. It explicitly warns the agent (and user) to never read or commit the real secrets file, only example placeholders. - [EXTERNAL_DOWNLOADS]: The skill triggers the download of the
c8runbinary from Camunda's official infrastructure. Use of official vendor resources from the author's own domain is legitimate functionality for an installation skill. - [REMOTE_CODE_EXECUTION]: While it involves downloading and running an executable (
c8run), the source is the official Camunda Download Center, which aligns with the skill's purpose as a vendor tool. It does not use unsafe piped execution (curl|bash).
Audit Metadata