workfront-ui-extension
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate architectural guidance for developing front-end extensions within the Adobe Workfront ecosystem. It correctly identifies the
sharedContextas the source for authentication and object metadata. - [DATA_EXFILTRATION]: The skill provides clear instructions on handling sensitive authentication data, such as
imsTokenandimsOrgID. It enforces security best practices by advising developers to pass these credentials only to backend Runtime actions and explicitly warning against exposing tokens in the UI (e.g., via toast notifications). - [EXTERNAL_DOWNLOADS]: The instructions reference the
@adobe/uix-guestNode.js package. This is an official SDK provided by the author (Adobe) for building extension guests, representing a standard and expected dependency for this type of development.
Audit Metadata