catalyst-workflow-scaffold
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a well-structured development utility that guides the agent through project scaffolding and testing. It focuses on functional correctness and security best practices within the Diagrid Catalyst ecosystem.
- [DATA_EXPOSURE]: The instructions include a specific security requirement to keep connection tokens out of chat logs, files, and command history, referencing established best practices for environment variable management.
- [EXTERNAL_DOWNLOADS]: The skill references official Dapr SDKs and specific stable versions for Python, Node.js, .NET, Go, and Java. It proactively warns the agent against using deprecated packages or non-existent Diagrid-branded variants, reducing the risk of supply chain confusion or typosquatting.
- [COMMAND_EXECUTION]: Platform operations are performed using a dedicated set of platform tools (
catalyst_*), ensuring that all interactions with the Catalyst environment remain within the intended functional scope and authorized capabilities.
Audit Metadata