dify-workflow
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides instructions to clone the official Dify repository from GitHub.
- Evidence:
git clone https://github.com/langgenius/dify.gitin the self-hosted deployment section. - Note: This targets a well-known open-source organization and is considered safe practice for documentation.
- [PROMPT_INJECTION]: The skill documents the processing of untrusted external data (user queries and uploaded documents) which creates a surface for indirect prompt injection.
- Ingestion points:
queryparameter in API requests and document uploads for knowledge bases (company_docs.pdf). - Boundary markers: None identified in the provided example code or prompts.
- Capability inventory: Network operations via
api.dify.ai, HTTP request nodes, and custom code execution nodes within the Dify platform. - Sanitization: No explicit validation or escaping of user-provided content is shown in the examples.
Audit Metadata