bullmq

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and reference material for the BullMQ library. All external links and package installation commands point to official repositories and well-known registries such as npm, PyPI, and the vendor's official Pro registry.
  • [INDIRECT_PROMPT_INJECTION]: The documentation describes a system that processes job data, which inherently handles untrusted input. The skill includes security guidance recommending that users avoid placing sensitive data in job payloads and use environment variables for secrets.
  • Ingestion points: The job.data property (documented in references/guide/jobs/job-data.md) accepts arbitrary JSON payloads.
  • Boundary markers: Data is structured as JSON, though no specific delimiters for LLM processing are suggested.
  • Capability inventory: The documentation describes workers that can perform various tasks, including network operations and database updates (documented in references/guide/workers/workers.md).
  • Sanitization: Security best practices are provided in references/guide/going-to-production.md, warning against storing secrets in job data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 01:28 AM