camunda-dmn
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx --yes dmnlintto download and run the structural validation tool from the npm registry. - [COMMAND_EXECUTION]: The skill utilizes shell commands like
findandxargsfor recursive file discovery andechoto generate the.dmnlintrcconfiguration file. It also interacts with thec8ctlCLI tool for Camunda 8 deployment and execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests DMN XML files, creating a potential surface for indirect prompt injection.
- Ingestion points: Reads
.dmnfiles from the workspace during discovery and linting tasks. - Boundary markers: None identified to separate file content from instructions.
- Capability inventory: Includes shell command execution and interaction with external tools like
npxandc8ctl. - Sanitization: No evidence of content validation or escaping is provided for the processed XML data.
Audit Metadata