inngest-setup

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for installing the inngest package and running the inngest-cli development server via npx. These are standard developer operations for the described service.
  • [CREDENTIALS_UNSAFE]: The skill identifies sensitive configuration requirements (INNGEST_EVENT_KEY, INNGEST_SIGNING_KEY) but explicitly instructs users to store them in environment variables and warns against hardcoding them in source code.
  • [EXTERNAL_DOWNLOADS]: Fetches configuration and tools from the official Inngest vendor domain and standard npm package registries.
  • [PROMPT_INJECTION]: The skill includes patterns for handling external event data but demonstrates the use of zod for strict schema validation, which reduces the surface area for indirect injection attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 12:28 AM
Security Audit — agent-trust-hub — inngest-setup