workflow-permission-web
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script (
permission_web.py) to automate the analysis and modification of configuration files. These operations are executed via a platform-neutral runtime (.plan/execute-script.py). The script includes deterministic logic for adding and removing domains and uses atomic file operations (temporary file + rename) to prevent corruption. - [DATA_EXFILTRATION]: While the skill interacts with network resources via the
WebSearchtool, this is strictly scoped to performing reputation research on unknown domains as part of its security audit function. No evidence was found of exfiltrating sensitive local data (such as environment variables or credentials) to external servers. - [SAFE]: The skill implements significant safety guardrails, including explicit prohibitions against automatic permission changes, a requirement for security research on unknown domains, and a structured approval process via
AskUserQuestion. It uses a data-driven approach for domain categorization (relying ondomain-lists.json) and flags high-risk Top-Level Domains (TLDs) and suspicious patterns for manual review.
Audit Metadata