building-nango-functions-remotely
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with the official Nango platform APIs (defaulting to api.nango.dev) to manage functions, including compilation and deployment. It also references official documentation for the Nango platform.
- [DYNAMIC_EXECUTION]: The core functionality involves generating TypeScript source code based on user requirements and transmitting it to remote endpoints for compilation and execution within Nango's cloud-based sandboxed environment.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external data such as provider API documentation and sample response payloads to inform the generation of function code and schemas.
- Ingestion points: API reference URLs and sample responses provided by the user in SKILL.md.
- Boundary markers: None specified for the processing of external documentation.
- Capability inventory: Remote code compilation, dry-runs, and deployment capabilities (SKILL.md, references/api.md).
- Sanitization: The skill documents the use of Zod schemas for input and output validation within the generated functions to ensure data integrity (references/actions.md).
- [COMMAND_EXECUTION]: The workflow involves making authenticated HTTP POST and GET requests to perform development operations like code execution (dry-runs) and environment deployment.
Audit Metadata