flow-next-strategy
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages a local strategy document through a structured interview process. It uses a bundled script (flowctl) and local environment variables to determine its execution environment, with no remote code execution or data exfiltration detected.- [SAFE]: Security controls are in place to prevent autonomous agents from executing the skill, ensuring human oversight for repository strategy changes.- [SAFE]: Data ingestion from local configuration files and the strategy document is handled using structured tools like jq, and the skill maintains local file integrity by refusing to overwrite foreign files without confirmation.
Audit Metadata