debugging-workflows
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the GitHub CLI (
gh) to list workflow runs, view job details, and download logs. It also utilizes standard shell utilities such asgrep,awk, andtailfor inspecting firewall logs within Docker containers. - [DYNAMIC_EXECUTION]: Local TypeScript scripts (
download-workflow-logs.tsanddownload-workflow-summary.ts) are executed at runtime usingnpx tsxto process and format workflow data. - [PRIVILEGE_ESCALATION]: The documentation includes commands that use
sudoto interact with theawf(Agent Workflow Firewall) utility, which is necessary for managing network egress rules and containerized traffic redirection. - [INDIRECT_PROMPT_INJECTION]: The skill provides the capability to ingest and analyze data from external workflow logs and summaries. It reduces the risk of malicious data influence by performing input validation on command-line arguments (e.g., run IDs, workflow names) and utilizing structured JSON parsing for handling tool outputs.
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto run scripts, which may fetch thetsxpackage from the official npm registry if it is not already available in the environment.
Audit Metadata