dynamic-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONPERSISTENCECOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill instructs the agent to dynamically generate and run Python scripts using the
execute_codetool to orchestrate file processing and web data extraction. - [INDIRECT_PROMPT_INJECTION]: The workflow involves ingesting untrusted data from URLs and codebase files which are then processed by subagents.
- Ingestion points: web_search, web_extract, and read_file (SKILL.md).
- Boundary markers: Absent.
- Capability inventory: execute_code, delegate_task, terminal, and patch (SKILL.md).
- Sanitization: Absent, though logical verification via 'adversarial convergence' is recommended.
- [PERSISTENCE]: The skill documents methods for maintaining long-running workflows across sessions using
cronjoband backgroundterminalprocesses. - [COMMAND_EXECUTION]: The orchestration patterns include the use of shell commands and filesystem modifications via
terminalandpatchtools.
Audit Metadata