workflows
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill describes using the
prefectCLI for workflow mutations, such as triggering deployments (prefect deployment run) and canceling flow runs (prefect flow-run cancel). It recommends safety measures including verifying the client's execution capability, checking authentication status, and requiring explicit user requests before execution.- [PROMPT_INJECTION]: The skill ingests untrusted data from multiple sources including event streams, flow run logs, and documentation search tools. This creates an indirect prompt injection surface where adversarial content in external data could influence agent actions. Evidence chain: 1. Ingestion points: MCP tool outputs (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Shell command execution via theprefectCLI. 4. Sanitization: Absent.
Audit Metadata