create-flow

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFE
Full Analysis
  • Resource Management: The skill utilizes a specialized toolset for interacting with Power Automate environments, flows, and connections. This access is scoped to the intended purpose of assisting users with flow creation and management.
  • User Confirmation: The workflow includes explicit steps to review designs and confirm actions with the user via the AskUserQuestion tool before creating or publishing flows, which is a recommended practice for automation tasks.
  • Validation and Pre-checks: The skill incorporates validation and preflight checks (validate_flow, preflight_flow) to ensure that generated flow definitions are syntactically and logically correct before they are applied to the environment.
  • Indirect Prompt Injection Surface: As the skill processes user requirements and external connector data to generate flow definitions, it possesses an inherent surface for indirect prompt injection. However, the inclusion of validation tools and mandatory user review steps effectively manages this consideration.
  • Ingestion points: User requirements gathering and external connector/template discovery (list_templates, get_connector).
  • Boundary markers: The instructions mandate presenting the design for user confirmation before execution.
  • Capability inventory: The skill can create, update, and publish flows, and has access to shell commands for CLI-specific operations.
  • Sanitization: Flow definitions are passed through a validation tool before creation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 09:15 PM