inngest-api-cli
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx inngest-cli@latestto fetch and run the Inngest CLI. This package is the official tool provided by the vendor (Inngest) and is central to the skill's functionality. - [COMMAND_EXECUTION]: The skill executes a wide range of shell commands through the Inngest CLI to interact with API endpoints. These operations include fetching sensitive account information (keys, webhooks) and performing mutations (creating environments, invoking functions).
- [INDIRECT_PROMPT_INJECTION]: There is an attack surface where the agent processes external data, such as function traces, event data, or generated SQL queries from natural language prompts. The skill mitigates this by instructing the agent to redact secrets from output summaries and to review generated SQL before execution.
Audit Metadata