functions-and-triggers
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a local websocket connection (
localhost) for its engine connection example, which is a safe practice for development environments. - [SAFE]: No hardcoded credentials, remote code downloads, or obfuscation techniques were detected in the skill content.
- [SAFE]: The skill documents standard architectural patterns for building event-driven workers using the iii engine SDK.
- [PROMPT_INJECTION]: Analysis of indirect prompt injection surface:
- Ingestion points:
SKILL.mddefines triggers (HTTP, queue, stream, subscribe) that process data from external event sources. - Boundary markers: None are explicitly defined in the provided implementation patterns.
- Capability inventory: Function handlers defined via
registerFunctionand cross-worker invocations viatrigger()enable execution of logic across different workers and languages. - Sanitization: No specific data validation or sanitization logic is included in the generic patterns, as these are meant to be implemented by the developer based on specific use cases.
Audit Metadata