commandkit-queue
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references external Node.js packages including
ioredis,@discordjs/brokers, and@commandkit/queue. These are standard dependencies used to facilitate the messaging and queueing functionality described in the skill. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for receiving and processing messages from external queue topics, which constitutes a data ingestion surface. The documentation explicitly mitigates this risk by including best practices that advise users to validate external inputs and permission boundaries before execution.
Audit Metadata