dynamic-workflow-packets
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands for development workflows, including linting, building, and running test suites. It also defines potentially destructive file operations such as mass-renaming, history rewriting, or force-pushing. Evidence: The 'Verification' and 'Risk Gates' sections in SKILL.md. Safety is managed through mandatory approval gates requiring user permission before any sensitive or mutating action.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and process untrusted external sources from repositories, market research, and third-party files. Evidence: 1. Ingestion points: 'Sources / files' and 'market/source mapping' are defined as packet inputs. 2. Boundary markers: The skill instructs the agent to 'preserve context isolation' and use 'isolated notes' for simulated packets. 3. Capability inventory: Execution of local tools (lint, build, test) and directory/file management. 4. Sanitization: The 'Integration' phase requires the agent to explicitly reject outputs that are 'unsafe, or outside scope'.
Audit Metadata