footprint-workflows
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The documentation identifies that configuration envelopes fetched via the CLI may contain Azure app-registration secrets. It explicitly instructs users and the agent to extract the inner configuration body and avoid committing the secret-laden envelope to version control, which is a key security best practice.
- [COMMAND_EXECUTION]: The skill uses a standard Python command (
python3 -c "import uuid; print(uuid.uuid4())") to generate fresh UUIDs required for new workflow configurations. This is a benign and necessary utility for the described development workflow. - [EXTERNAL_DOWNLOADS]: The skill utilizes the Datex Studio CLI (
dxs) to fetch metadata and configuration from official platform API endpoints. These operations are authenticated and target the vendor's own infrastructure as part of the intended functionality.
Audit Metadata