camunda-connectors
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates the management of Camunda workflow connectors using the official
@camunda8/clitool. The operations described are standard developer workflows for process automation. - [SAFE]: Security best practices for secret management are explicitly encouraged. The instructions advise users to use
{{secrets.NAME}}placeholders for sensitive values like API tokens and credentials, preventing hardcoded secrets in version-controlled BPMN files. - [EXTERNAL_DOWNLOADS]: The skill mentions the ability to fetch element templates from
https://URLs or GitHub blob URLs. This is a documented feature of thec8ctltool for retrieving remote configuration and is consistent with the skill's primary purpose of discovering and applying templates. - [INDIRECT_PROMPT_INJECTION]: The skill operates on BPMN files and external JSON templates, which represents a data ingestion surface. However, this is the core functional purpose of the skill for workflow modeling, and the instructions focus on structured configuration through a CLI tool rather than unstructured natural language processing of untrusted data.
Audit Metadata