inngest-middleware
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates secure practices, such as managing sensitive keys via environment variables and implementing authenticated error reporting.
- [DATA_EXFILTRATION]: The instructions include patterns for reporting logs and errors to external endpoints, including the well-known service Sentry and user-defined logging endpoints. These are standard observability features and do not represent unauthorized exfiltration.
- [INDIRECT_PROMPT_INJECTION]: The skill defines middleware that processes external event data (
ctx.event.data). - Ingestion points: Event data is ingested in
onFunctionRunhooks across several examples inreferences/built-in-middleware.mdandreferences/dependency-injection.md. - Boundary markers: None explicitly provided for raw data separation.
- Capability inventory: Uses
fetchfor error reporting andSentryfor tracing. - Sanitization: No specific content sanitization is demonstrated before data is logged or sent to reporting endpoints.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known and official packages from the Inngest ecosystem and other established providers (OpenAI, Stripe, Prisma, Sentry), which is expected for the stated purpose of the skill.
Audit Metadata