inngest-agents
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples for using the Inngest framework. All referenced domains (inngest.com, agentkit.inngest.com) and packages (@inngest/agent-kit) are official resources belonging to the vendor.
- [INDIRECT_PROMPT_INJECTION]: The skill describes processing external data (e.g., support tickets, event payloads) through AI agents. It explicitly mitigates indirect injection risks by instructing developers to:
- Validate tool parameters with schemas.
- Never trust model-provided arguments.
- Use tenant/user IDs from authenticated event data rather than model-generated text.
- Isolate side effects using durable step boundaries.
- [COMMAND_EXECUTION]: While the skill involves executing tools and workflows, it focuses on durable orchestration. The code examples demonstrate safe execution patterns using
step.runand advise on implementing idempotency keys to prevent duplicate operations.
Audit Metadata