agentic-workflows

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches instructional content from the official GitHub 'gh-aw' repository. These downloads are used to provide the agent with task-specific prompts for designing, debugging, and updating workflows.
  • [COMMAND_EXECUTION]: The skill utilizes 'curl' to retrieve markdown files from 'raw.githubusercontent.com' as a fallback mechanism. It explicitly mandates that no 'Authorization' headers or tokens be sent to these public URLs, preventing potential credential leakage.
  • [SAFE]: All identified external resources and instructions originate from the vendor's own infrastructure (GitHub), which is a trusted source for this skill. The routing logic follows standard dispatcher patterns without attempting to bypass safety or exfiltrate data.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 04:41 PM