trigger-dev
Enables the creation of reliable background jobs in serverless environments, handling long-running tasks and asynchronous processing.
Install this skill
Security score
The trigger-dev skill was audited on Mar 7, 2026 and we found 9 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 80 | uploadToS3(`thumbs/${payload.userId}/thumb.webp`, thumbnail), |
Template literal with variable interpolation in command context
| 81 | uploadToS3(`images/${payload.userId}/medium.webp`, medium), |
Template literal with variable interpolation in command context
| 82 | uploadToS3(`images/${payload.userId}/large.webp`, large), |
Template literal with variable interpolation in command context
| 182 | console.log(`Processed ${processed}/${records.length}`) |
Template literal with variable interpolation in command context
| 208 | 'Authorization': `Bearer ${process.env.OPENAI_API_KEY}`, |
Fetch to external URL
| 205 | const response = await fetch('https://api.openai.com/v1/embeddings', { |
Webhook reference - potential data exfiltration
| 5 | long-running tasks in the background, process webhooks reliably, build async |
Access to .env file
| 208 | 'Authorization': `Bearer ${process.env.OPENAI_API_KEY}`, |
External URL reference
| 205 | const response = await fetch('https://api.openai.com/v1/embeddings', { |
Install this skill with one command
/learn @terminalskills/trigger-dev