stelow-workflow-router
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's algorithm utilizes standard shell utilities such as jq, awk, grep, and tmux to parse state and manage the execution environment. It also relies on a vendor-specific utility, scripts/stelow, to advance the workflow state.
- [INDIRECT_PROMPT_INJECTION]: The router processes input from the ## Hand-off block in state.md, which represents data passed from previous agent actions. The skill implements a validation step that checks the next-candidate against an allowed list defined in transitions.md before proceeding, which serves as a control against unexpected inputs.
- [DYNAMIC_EXECUTION]: Based on the workflow state and validation results, the skill dynamically loads the next stage's skill file using a load_skill command. This dynamic loading is scoped to the workflow's transition logic and vendor-prefixed skill names.
Audit Metadata