workflow-producer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates its workflow by calling several local Python scripts via the shell. These include
verify_required_files.pyfor stage gate validation,fact_check_gate.pyfor evidence verification,auto_clean_hook.pyfor final delivery processing, andupdate_run_manifest.pyfor state management. These are used to maintain the integrity of the multi-stage process. - [INDIRECT_PROMPT_INJECTION]: As the skill is designed to process external research materials and user-provided drafts, it identifies a potential surface for indirect prompt injection. It mitigates this risk with an explicit instruction to treat research findings as data and strictly avoid executing any instructions found within them. Furthermore, the mandatory multi-stage review process (Stages 7-9) and the final automated fact-checking gate (Stage 10.5) provide architectural defenses against malicious content propagation.
Audit Metadata