agentic-workflow-development
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation and maintenance of the
gh-awextension from thegithuborganization repository using the GitHub CLI (gh extension install github/gh-aw). - [COMMAND_EXECUTION]: The skill provides numerous examples for using CLI tools to manage the workflow development lifecycle, including repository initialization (
gh aw init), compilation (gh aw compile), and manual execution (gh aw run). It also suggests automating these tasks via Git hooks and CI/CD pipelines. - [INDIRECT_PROMPT_INJECTION]: The skill defines a framework for creating workflows that ingest instructions from markdown files. It establishes security boundaries by requiring the use of safe-output configurations, minimal permission sets, and automated security auditing tools (
gh aw security-check) to analyze workflow definitions before they are committed or run.
Audit Metadata