upstash-workflow
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured documentation and code templates for building asynchronous workflows using Upstash. The patterns focus on standard software architecture (3-layer architecture) and resource management.
- [SAFE]: Security best practices for secret management are correctly followed, instructing developers to use environment variables (e.g.,
QSTASH_TOKEN,APP_URL) for authentication and configuration instead of hardcoding sensitive values. - [SAFE]: Code templates include explicit input validation for request payloads (e.g., checking for
itemId), which helps prevent common errors and potential exploitation of uninitialized variables. - [SAFE]: External dependencies referenced in the templates, such as
@upstash/workflowandes-toolkit, are established and legitimate packages from well-known registries. - [SAFE]: Network communications described in the guides are restricted to authorized endpoints (the user's own application or official Upstash infrastructure).
Audit Metadata