inngest-api-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow for this skill uses the inngest api CLI to fetch and inspect run/event/trace and Insights data only after the caller provides specific identifiers (e.g., get-function-run <run_id>, get-function-trace <run_id>, get-event-runs <event_id>), and it does not describe monitoring or ingesting arbitrary outsider-authored free text from a queue/feed without explicit target selection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). This skill tells the agent to fetch external runtime docs that can change agent behavior—specifically https://api-docs.inngest.com/llms.txt (likely LLM instructions) and https://api-docs.inngest.com/api-specs/v2.json (OpenAPI used at runtime), so remote content fetched during runtime could directly control prompts or request shapes.