camunda-development
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill operates as a thin orientation layer for Camunda development. It provides logical decision paths for process integrations without implementing sensitive logic or requesting excessive permissions.
- [COMMAND_EXECUTION]: Instructions guide the agent to use
c8ctl, a vendor-provided CLI tool, for searching the local element template catalog (c8ctl element-template search) and linting BPMN files (c8ctl bpmn lint). These commands are standard operations for managing Camunda 8 resources. - [EXTERNAL_DOWNLOADS]: The skill references the use of
npx --yes dmnlintto perform structural validation of DMN tables. This involves fetching the utility from the public npm registry, which is a standard procedure for this ecosystem tool. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-defined process requirements (e.g., Slack notifications, Kafka integrations) and orchestrate handoffs to other development skills.
- Ingestion points: User-provided integration requirements and project-specific artifacts (.bpmn, .dmn, .form) described in
SKILL.md. - Boundary markers: Not explicitly defined in this high-level skill; it relies on following the provided decision matrix.
- Capability inventory: Execution of
c8ctlandnpxvalidation commands. - Sanitization: Not applicable as the skill focuses on architectural guidance and structural validation using local CLI tools.
Audit Metadata