inngest-cli
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard documentation for the Inngest CLI tool. All identified network operations and package installations reference official vendor resources (inngest.com, @inngest/* packages, inngest/inngest Docker image).
- [PROMPT_INJECTION]: The skill exposes a surface for indirect prompt injection by ingesting data from external SDK endpoints and providing capabilities to invoke functions or send events. This is inherent to the tool's primary purpose for local development and testing.
- Ingestion points: SDK serve endpoints (e.g., http://localhost:3000/api/inngest) defined by the --sdk-url flag or inngest.json configuration.
- Boundary markers: None explicitly mentioned for filtering external app responses within the CLI context.
- Capability inventory: The skill provides MCP tools and CLI commands to invoke functions (invoke_function) and send events (send_event, curl).
- Sanitization: Not explicitly implemented in the CLI instructions; relies on the user to provide trusted SDK URLs.
Audit Metadata