inngest-api
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches technical documentation and OpenAPI v2 specifications from the official Inngest documentation domain (api-docs.inngest.com).
- [COMMAND_EXECUTION]: Instructs the agent to utilize standard command-line tools such as curl and the Inngest CLI (npx inngest-cli) to perform network operations and infrastructure management.
- [DATA_EXFILTRATION]: Provides the ability to retrieve sensitive key material via the Inngest API (/keys/events, /keys/signing), but mitigates risk through explicit instructions to redact tokens, secrets, and webhook URLs from all user-facing outputs and logs.
- [PROMPT_INJECTION]: The skill processes external content which presents a surface for indirect prompt injection. 1. Ingestion points: Markdown documentation and REST API responses from Inngest. 2. Boundary markers: Recommends structured JSON parsing for responses. 3. Capability inventory: Execution of shell commands and environment variable access. 4. Sanitization: Mandates redaction of credentials and sensitive payloads.
Audit Metadata