inngest-steps
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill contains documentation and code snippets for the Inngest SDK.
- [DATA_EXFILTRATION]: The skill references the vendor's official domain (inngest.com) for documentation and API communication, which is expected behavior for this tool.
- [PROMPT_INJECTION]: The skill describes methods for ingesting and processing external event data. This establishes a surface for indirect prompt injection that requires proper sanitization in implementation.
- Ingestion points: event.data in step.run and step.waitForEvent (SKILL.md).
- Boundary markers: Not present in the documentation examples.
- Capability inventory: step.run executes code, step.invoke calls functions, and step.sendEvent dispatches events (SKILL.md).
- Sanitization: Not explicitly shown in the conceptual snippets.
Audit Metadata