The Agent Skills Directory

[SAFE]: The skill provides integration patterns and documentation for Trigger.dev. It prioritizes security by including a 'Sharp Edges' section that warns users against hardcoding sensitive API keys (e.g., TRIGGER_SECRET_KEY) and recommends using environment variables.
[EXTERNAL_DOWNLOADS]: The skill references official Node.js packages such as @trigger.dev/sdk and @trigger.dev/openai. These are well-known services for background job orchestration and are considered safe within the context of developer tooling.
[COMMAND_EXECUTION]: The documentation suggests the use of standard CLI commands for the platform (e.g., npx trigger.dev dev and npx trigger.dev env push). These commands are typical for the developer experience provided by the vendor and are used for configuration and deployment.
[INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface by documenting how to process external data (webhooks) and interpolate user-supplied data into AI prompts. However, it provides mitigation strategies like idempotency keys and structured logging to handle these operations reliably.

trigger-dev