camunda-development

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill operates as a thin orientation layer for Camunda development. It provides logical decision paths for process integrations without implementing sensitive logic or requesting excessive permissions.
  • [COMMAND_EXECUTION]: Instructions guide the agent to use c8ctl, a vendor-provided CLI tool, for searching the local element template catalog (c8ctl element-template search) and linting BPMN files (c8ctl bpmn lint). These commands are standard operations for managing Camunda 8 resources.
  • [EXTERNAL_DOWNLOADS]: The skill references the use of npx --yes dmnlint to perform structural validation of DMN tables. This involves fetching the utility from the public npm registry, which is a standard procedure for this ecosystem tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-defined process requirements (e.g., Slack notifications, Kafka integrations) and orchestrate handoffs to other development skills.
  • Ingestion points: User-provided integration requirements and project-specific artifacts (.bpmn, .dmn, .form) described in SKILL.md.
  • Boundary markers: Not explicitly defined in this high-level skill; it relies on following the provided decision matrix.
  • Capability inventory: Execution of c8ctl and npx validation commands.
  • Sanitization: Not applicable as the skill focuses on architectural guidance and structural validation using local CLI tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 09:00 PM