workflows
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The configureWorkflow function executes shell commands provided as strings to initialize background services such as web servers and backend APIs (SKILL.md).
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could contain malicious instructions.
- Ingestion points: The getWorkflowStatus function retrieves terminal output logs from managed processes (SKILL.md).
- Boundary markers: No delimiters or warnings are provided to instruct the agent to ignore instructions embedded in the logs.
- Capability inventory: The agent can execute shell commands via configureWorkflow and control process execution via restartWorkflow and removeWorkflow (SKILL.md).
- Sanitization: There is no evidence that workflow logs are sanitized or filtered before being returned to the agent context.
Audit Metadata