inngest
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a documentation and boilerplate provider for Inngest integration. The code examples provided are standard implementation patterns for event-driven workflows, including interactions with well-known services like Stripe, OpenAI, and Resend.
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external data via webhooks and event payloads, which represents a potential ingestion surface for indirect prompt injection.
- Ingestion points: Event data and webhook payloads processed in
inngest.createFunction(SKILL.md). - Boundary markers: The instructions explicitly mandate the use of server-side validation and signature verification to delimit trusted from untrusted data.
- Capability inventory: The documented patterns include database operations, email dispatch, and payment processing.
- Sanitization: The skill specifically warns developers to "Never charge an amount accepted only from an untrusted event" and to "Verify provider signatures before enqueueing webhook events."
Audit Metadata