agentic-workflows
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches instructional content from the official GitHub 'gh-aw' repository. These downloads are used to provide the agent with task-specific prompts for designing, debugging, and updating workflows.
- [COMMAND_EXECUTION]: The skill utilizes 'curl' to retrieve markdown files from 'raw.githubusercontent.com' as a fallback mechanism. It explicitly mandates that no 'Authorization' headers or tokens be sent to these public URLs, preventing potential credential leakage.
- [SAFE]: All identified external resources and instructions originate from the vendor's own infrastructure (GitHub), which is a trusted source for this skill. The routing logic follows standard dispatcher patterns without attempting to bypass safety or exfiltrate data.
Audit Metadata