debugging-workflows

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of the GitHub CLI (gh) to list workflow runs, view job details, and download logs. It also utilizes standard shell utilities such as grep, awk, and tail for inspecting firewall logs within Docker containers.
  • [DYNAMIC_EXECUTION]: Local TypeScript scripts (download-workflow-logs.ts and download-workflow-summary.ts) are executed at runtime using npx tsx to process and format workflow data.
  • [PRIVILEGE_ESCALATION]: The documentation includes commands that use sudo to interact with the awf (Agent Workflow Firewall) utility, which is necessary for managing network egress rules and containerized traffic redirection.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides the capability to ingest and analyze data from external workflow logs and summaries. It reduces the risk of malicious data influence by performing input validation on command-line arguments (e.g., run IDs, workflow names) and utilizing structured JSON parsing for handling tool outputs.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to run scripts, which may fetch the tsx package from the official npm registry if it is not already available in the environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 04:00 AM