workflow-clarify
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local Python utility scripts:
../ui-design/scripts/class_rules.pyandworkflow/scripts/record.py. These scripts are used for analyzing project-specific UI classes and updating the workflow plan. The execution uses the isolated mode flag (-I) to ensure the scripts run in a controlled environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by reading the project's source code to trace journey paths, failures, and compatibility. This creates an indirect prompt injection surface. The skill mitigates this by adhering to a specific evidence-recording policy in
workflow/GROUNDING.mdand requiring multi-stage human approval gates before any code modifications occur.
Audit Metadata