skills/camunda/skills/camunda-dmn/Gen Agent Trust Hub

camunda-dmn

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx --yes dmnlint to download and run the structural validation tool from the npm registry.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands like find and xargs for recursive file discovery and echo to generate the .dmnlintrc configuration file. It also interacts with the c8ctl CLI tool for Camunda 8 deployment and execution.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests DMN XML files, creating a potential surface for indirect prompt injection.
  • Ingestion points: Reads .dmn files from the workspace during discovery and linting tasks.
  • Boundary markers: None identified to separate file content from instructions.
  • Capability inventory: Includes shell command execution and interaction with external tools like npx and c8ctl.
  • Sanitization: No evidence of content validation or escaping is provided for the processed XML data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 09:00 PM