workflow-execute
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for project task execution based on local planning files. Its operations, including file modification and test execution, are consistent with its stated purpose of implementing code from a structured plan.
- [SAFE]: File paths used for context loading (e.g.,
docs/work/WORK-{task-name}/plan.md) are scoped to the project's documentation directory, following standard organizational patterns without signs of malicious path traversal. - [SAFE]: The skill includes security-conscious instructions, specifically warning the agent to reference but never copy code from prototype directories (
__prototype__/), which may contain unvalidated or low-quality logic. - [SAFE]: No network exfiltration, hardcoded credentials, or obfuscated content were found. The mention of
npm installin the caveats section is part of a documentation template and not an instruction for immediate remote code execution.
Audit Metadata