workflow-setup
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
okouCLI binary to manage the lifecycle of workflows and triggers. Supported operations includeokou workflow create,edit,view,run,delete, andcopy, as well asokou workflow trigger add,update,enable,disable, andremove. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by processing untrusted data from multiple external integrations.
- Ingestion points: As detailed in
references/trigger-setup.md, the skill ingests data from external sources throughgmail-new-message,gmail-label-applied,github-label-applied,google-forms-response-submitted, andwebhookpayloads. - Boundary markers: The instructions do not specify the use of delimiters or boundary markers to isolate incoming external data from the agent's internal reasoning.
- Capability inventory: The agent has the capability to modify persistent system behavior by creating or updating automations that run on schedules or event triggers across the
okouenvironment. - Sanitization: There is no evidence of specific data sanitization, filtering, or validation processes for the content retrieved from external triggers before it is used by the agent.
Audit Metadata