bullmq
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and reference material for the BullMQ library. All external links and package installation commands point to official repositories and well-known registries such as npm, PyPI, and the vendor's official Pro registry.
- [INDIRECT_PROMPT_INJECTION]: The documentation describes a system that processes job data, which inherently handles untrusted input. The skill includes security guidance recommending that users avoid placing sensitive data in job payloads and use environment variables for secrets.
- Ingestion points: The
job.dataproperty (documented inreferences/guide/jobs/job-data.md) accepts arbitrary JSON payloads. - Boundary markers: Data is structured as JSON, though no specific delimiters for LLM processing are suggested.
- Capability inventory: The documentation describes workers that can perform various tasks, including network operations and database updates (documented in
references/guide/workers/workers.md). - Sanitization: Security best practices are provided in
references/guide/going-to-production.md, warning against storing secrets in job data.
Audit Metadata