inngest-agents

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and code examples for using the Inngest framework. All referenced domains (inngest.com, agentkit.inngest.com) and packages (@inngest/agent-kit) are official resources belonging to the vendor.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes processing external data (e.g., support tickets, event payloads) through AI agents. It explicitly mitigates indirect injection risks by instructing developers to:
  • Validate tool parameters with schemas.
  • Never trust model-provided arguments.
  • Use tenant/user IDs from authenticated event data rather than model-generated text.
  • Isolate side effects using durable step boundaries.
  • [COMMAND_EXECUTION]: While the skill involves executing tools and workflows, it focuses on durable orchestration. The code examples demonstrate safe execution patterns using step.run and advise on implementing idempotency keys to prevent duplicate operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 12:28 AM
Security Audit — agent-trust-hub — inngest-agents