building-workflows

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill enforces a 'Draft-Test-Publish' lifecycle, requiring workflows to be tested one step at a time with mock data before being enabled on production traffic.
  • [SAFE]: Explicit instructions are provided to never hand-author bytecode for triggers, filters, or conditions. The skill correctly identifies this as a server-side responsibility, which prevents the injection of malformed execution logic.
  • [SAFE]: All external resources and tools referenced (e.g., workflows-*, cdp-function-*) are part of the PostHog vendor ecosystem, and the skill provides clear guidance on using their official integrations rather than custom code.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 12:28 PM
Security Audit — agent-trust-hub — building-workflows