skills/oyi77/1ai-skills/dify-workflow/Gen Agent Trust Hub

dify-workflow

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and provides instructions to clone the official Dify repository from GitHub.
  • Evidence: git clone https://github.com/langgenius/dify.git in the self-hosted deployment section.
  • Note: This targets a well-known open-source organization and is considered safe practice for documentation.
  • [PROMPT_INJECTION]: The skill documents the processing of untrusted external data (user queries and uploaded documents) which creates a surface for indirect prompt injection.
  • Ingestion points: query parameter in API requests and document uploads for knowledge bases (company_docs.pdf).
  • Boundary markers: None identified in the provided example code or prompts.
  • Capability inventory: Network operations via api.dify.ai, HTTP request nodes, and custom code execution nodes within the Dify platform.
  • Sanitization: No explicit validation or escaping of user-provided content is shown in the examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 03:39 PM
Security Audit — agent-trust-hub — dify-workflow