camunda-connectors

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates the management of Camunda workflow connectors using the official @camunda8/cli tool. The operations described are standard developer workflows for process automation.
  • [SAFE]: Security best practices for secret management are explicitly encouraged. The instructions advise users to use {{secrets.NAME}} placeholders for sensitive values like API tokens and credentials, preventing hardcoded secrets in version-controlled BPMN files.
  • [EXTERNAL_DOWNLOADS]: The skill mentions the ability to fetch element templates from https:// URLs or GitHub blob URLs. This is a documented feature of the c8ctl tool for retrieving remote configuration and is consistent with the skill's primary purpose of discovering and applying templates.
  • [INDIRECT_PROMPT_INJECTION]: The skill operates on BPMN files and external JSON templates, which represents a data ingestion surface. However, this is the core functional purpose of the skill for workflow modeling, and the instructions focus on structured configuration through a CLI tool rather than unstructured natural language processing of untrusted data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 06:12 PM
Security Audit — agent-trust-hub — camunda-connectors