fest-standalone-workflows
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions involve executing the
festcommand-line utility to create and manage local workflow state (e.g.,fest create workflow,fest next,fest workflow advance). These operations are local to the user's project directory and are standard for task management tooling. - [INDIRECT_PROMPT_INJECTION]: The skill accepts JSON input via the
--stepsflag to populateWORKFLOW.md. This creates an ingestion point for external data that could theoretically contain instructions intended to influence the agent's behavior when it later reads the workflow file. However, the use of a structured JSON schema for these steps serves as an inherent boundary that reduces the likelihood of accidental instruction following.
Audit Metadata