trigger-chat-agent-advanced
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs users on how to use the
nodeCLI to resolve the installation path of the@trigger.dev/sdkpackage. This is a standard development practice for locating local files and does not involve arbitrary command execution. - [EXTERNAL_DOWNLOADS]: The skill references the
@trigger.dev/sdkNode.js package as a prerequisite. This is the official SDK provided by the vendor (Trigger.dev) and is an expected dependency for the described functionality. - [PROMPT_INJECTION]: The skill uses the keyword 'CRITICAL' to emphasize important architectural guidance regarding API usage. This is instructional language and not an attempt to override the AI agent's safety guardrails or instructions.
- [PROMPT_INJECTION]: The skill describes an architecture for processing external data (session inputs and tool outputs), which constitutes an indirect prompt injection surface.
- Ingestion points: Data enters the context via tool results (
addToolOutput) and session channels (/realtime/v1/sessions/{id}/in/append). - Boundary markers: The provided documentation does not specify explicit delimiters or guardrails for sanitizing this input within the code examples.
- Capability inventory: The skill utilizes
fetchfor communicating with Trigger.dev APIs and describes the use of tools for human-in-the-loop (HITL) interactions. - Sanitization: No explicit sanitization or validation routines for external message content are detailed in this reference guide.
Audit Metadata