inngest-local
Sets up self-hosted Inngest on macOS for durable background task management, enabling event-driven functions and workflows.
Install this skill
or
46/100
Security score
The inngest-local skill was audited on Mar 7, 2026 and we found 14 security issues across 4 threat categories, including 2 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
medium line 202
Template literal with variable interpolation in command context
SourceSKILL.md
| 202 | const path = `/tmp/downloads/${crypto.randomUUID()}.bin`; |
high line 407
Piping content to bash shell
SourceSKILL.md
| 407 | curl -sL joelclaw.com/scripts/inngest-setup.sh | bash |
high line 412
Piping content to bash shell
SourceSKILL.md
| 412 | curl -sL joelclaw.com/scripts/inngest-setup.sh | bash -s -- 2 |
medium line 265
Curl to non-GitHub URL
SourceSKILL.md
| 265 | curl -X POST http://localhost:8288/e/key \ |
medium line 43
Webhook reference - potential data exfiltration
SourceSKILL.md
| 43 | 2. **General background jobs** — scheduled tasks, webhooks, data processing |
low line 56
Access to .env file
SourceSKILL.md
| 56 | echo "INNGEST_SIGNING_KEY=$INNGEST_SIGNING_KEY" >> .env.inngest |
low line 57
Access to .env file
SourceSKILL.md
| 57 | echo "INNGEST_EVENT_KEY=$INNGEST_EVENT_KEY" >> .env.inngest |
low line 73
External URL reference
SourceSKILL.md
| 73 | Open http://localhost:8288 — you should see the Inngest dashboard. |
low line 265
External URL reference
SourceSKILL.md
| 265 | curl -X POST http://localhost:8288/e/key \ |
low line 267
External URL reference
SourceSKILL.md
| 267 | -d '{"name": "task/process", "data": {"url": "https://example.com/file.txt", "outputPath": "/tmp/out"}}' |
low line 340
External URL reference
SourceSKILL.md
| 340 | <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
low line 380
External URL reference
SourceSKILL.md
| 380 | 2. **Docker-to-host networking.** If Inngest runs in Docker and the worker on the host, the server can't reach `localhost:3111`. Pass `--sdk-url http://host.docker.internal:3111/api/inngest` on the do |
low line 396
External URL reference
SourceSKILL.md
| 396 | - [ ] Inngest dashboard accessible at http://localhost:8288 |
low line 435
External URL reference
SourceSKILL.md
| 435 | - [Inngest](https://www.inngest.com/) — the workflow engine |
Scanned on Mar 7, 2026
View Security DashboardInstall this skill with one command
/learn @joelhooks/inngest-local