creating-workflows-using-claude-flow
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill and its provided templates facilitate the execution of shell commands to manage background processes, build software artifacts, and invoke LLM orchestration tools.
- Evidence: The
assets/workflow-script-template.shscript executesmise start,bun run build, andnpx claude-flow. TheSKILL.mdfile recommends usinguv run jelmorefor LLM invocations and provides patterns for log monitoring usinggrepand process management. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of external software packages from the NPM registry to function.
- Evidence:
README.mdandreferences/claude-flow-commands.mdinstruct the user to installclaude-flow@alphavianpm install -gor execute it vianpx. - [PROMPT_INJECTION]: The skill implementation pattern creates a surface for indirect prompt injection by reading requirements from a local file and including them in LLM prompts.
- Ingestion points:
TASK.mdis read and its content is assigned to theobjectivevariable inassets/workflow-script-template.shandSKILL.md. - Boundary markers: Absent; input is concatenated directly into the prompt string without explicit delimiters or instructions to ignore embedded commands.
- Capability inventory: The agent has capabilities for subprocess execution (via
claude-flow swarm), file system access, and background process management in theassets/workflow-script-template.shscript. - Sanitization: None observed; the content of the task file is used verbatim in the prompt construction.
Audit Metadata