celery
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard documentation for the Celery project. All code examples for Redis, RabbitMQ, and SQS brokers follow established community patterns and use local or placeholder credentials (e.g., 'localhost', 'admin:password').
- [PROMPT_INJECTION]: The skill identifies ingestion points for external data such as
webhook_dataandprocess_data(data)inSKILL.md. While this represents an architectural surface for indirect prompt injection if the task data is later processed by an LLM, the skill provides specific security best practices including signature verification (verify_signature) and input validation advice to mitigate these risks. - [EXTERNAL_DOWNLOADS]: The documentation includes standard
pip installcommands for Celery and related utilities likefloweranddjango-celery-beatfrom the official Python Package Index (PyPI). It also references official project resources from Cloudflare and TomeVault (the skill vendor). - [COMMAND_EXECUTION]: The skill includes examples of legitimate CLI usage for managing background workers and periodic task schedulers (e.g.,
celery -A myapp worker). These commands are necessary for the tool's core functionality and do not involve unauthorized privilege escalation.
Audit Metadata