skills/tomevault-io/tomes/celery/Gen Agent Trust Hub

celery

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides standard documentation for the Celery project. All code examples for Redis, RabbitMQ, and SQS brokers follow established community patterns and use local or placeholder credentials (e.g., 'localhost', 'admin:password').
  • [PROMPT_INJECTION]: The skill identifies ingestion points for external data such as webhook_data and process_data(data) in SKILL.md. While this represents an architectural surface for indirect prompt injection if the task data is later processed by an LLM, the skill provides specific security best practices including signature verification (verify_signature) and input validation advice to mitigate these risks.
  • [EXTERNAL_DOWNLOADS]: The documentation includes standard pip install commands for Celery and related utilities like flower and django-celery-beat from the official Python Package Index (PyPI). It also references official project resources from Cloudflare and TomeVault (the skill vendor).
  • [COMMAND_EXECUTION]: The skill includes examples of legitimate CLI usage for managing background workers and periodic task schedulers (e.g., celery -A myapp worker). These commands are necessary for the tool's core functionality and do not involve unauthorized privilege escalation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 11:05 AM
Security Audit — agent-trust-hub — celery