nifi-flow-layout
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to automate the layout of Apache NiFi processors and connections. The provided Python and Node.js scripts were audited and no malicious patterns, prompt injections, or unauthorized data access were detected. Sensitive authentication materials, such as certificates and PKCS#12 files, are handled according to best practices: they are passed via command-line arguments, and in
scripts/nifi_layout.py, temporary keys are created with restricted file permissions (0o600) and explicitly deleted via afinallyblock after use. - [EXTERNAL_DOWNLOADS]: The skill utilizes standard, well-known dependencies for its operation, including the
requestsandcryptographylibraries for Python andplaywrightfor Node.js. These tools are used appropriately for API communication and UI screenshot capture. - [SAFE]: While the skill ingests NiFi flow definitions (JSON) from external APIs, creating a potential surface for indirect prompt injection, the risk is negligible. The skill's logic is strictly scoped to visual arrangement (coordinates, bends, labels) and does not interpret flow data as executable instructions. Furthermore, the skill enforces safety protocols such as mandatory dry-runs and automated flow backups before any changes are applied to the target environment.
Audit Metadata