upstash-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a documentation and scaffolding resource for backend developers. It does not contain executable malicious code or patterns.
- [SAFE]: Sensitive information, such as
QSTASH_TOKENandCLOUD_DATABASE_URL, is correctly instructed to be managed through environment variables rather than being hardcoded. - [SAFE]: Network operations are limited to standard HTTP triggers for the Upstash service and the application's own configured
APP_URL. - [SAFE]: The implementation templates include defensive programming patterns, such as verifying the presence of
itemIdin request payloads and using structured error handling. - [SAFE]: All identified dependencies are well-known and standard libraries for the described environment (e.g.,
@upstash/workflow,es-toolkit).
Audit Metadata