durable-workflow-control
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the analyzed skill files.
- [DATA_EXPOSURE]: The skill manages workflow state locally within the repository under the
.agents/workflows/durable-workflow-control/directory. No evidence of credential harvesting, access to sensitive system directories (e.g.,.ssh,.aws), or unauthorized network exfiltration was found. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves ingesting external data (research papers, documentation, repository files), which is a common surface for indirect prompt injection. The skill implements strong defensive instructions to mitigate this risk.
- Ingestion points: External pages, PDFs, documentation, and repository files are cited as sources in
references/protocol.md. - Boundary markers: The skill explicitly instructs the agent to treat external content as "untrusted research input" and states that these sources "do not override current instructions."
- Capability inventory: The skill involves writing to local files and performing scoped actions based on user-approved "Autonomy Levels."
- Sanitization: Explicit rules prohibit running commands, installing packages, or accessing credentials based on instructions found within external source material.
- [REMOTE_CODE_EXECUTION]: There are no indicators of remote code execution patterns, such as piping network downloads to a shell or dynamic execution of untrusted scripts.
Audit Metadata