author-flowglad-skill

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a test suite (tests/test_build_package_payload.py) that utilizes subprocess.run to execute the bundled build-package-payload.py utility. This is a standard and safe implementation for unit testing the skill's packaging logic within a development environment.
  • [DYNAMIC_EXECUTION]: The utility script scripts/build-package-payload.py reads files from a user-specified directory and encodes them into Base64 format. This is a functional requirement for the skill's primary purpose of creating transportable package payloads for the Flowglad platform.
  • [SAFE]: The skill follows secure development practices, explicitly instructing authors not to include credentials, tokens, or sensitive datasets in their packages. The workflow for remote uploads described in the documentation utilizes dynamically generated URLs provided by the platform's own management tools, representing legitimate infrastructure integration.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 07:50 PM
Security Audit — agent-trust-hub — author-flowglad-skill