trigger-dev
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents mechanisms for processing external data via background task payloads and AI tool integrations.
- Ingestion points: Untrusted data enters the agent context through task
payloadarguments,metadatafields, andai.toolinputs defined incore-reference.mdandadvanced-reference.md. - Boundary markers: While explicit delimiters for prompt interpolation aren't specified in the patterns, the instructions focus on structured TypeScript code development.
- Capability inventory: The skill enables capabilities including network requests (
retry.fetchincore-reference.md), system package management (aptGetinconfig-reference.md), and script execution (python.runScriptinadvanced-reference.md). - Sanitization: The skill mitigates risks by promoting
schemaTaskwithzodinSKILL.mdandcore-reference.mdfor strict runtime validation and type-safe processing of all incoming data. - [DYNAMIC_EXECUTION]: The skill documents the use of
@trigger.dev/pythonfor executing inline Python code and script files (python.runInline,python.runScript). These are standard features of the Trigger.dev platform for processing data in background workers. - [EXTERNAL_DOWNLOADS]: The instructions reference the installation of official packages from the
@trigger.devscope via npm and link to official documentation attrigger.dev. These references target a well-known service and are documented neutrally.
Audit Metadata