acomo-workflow-modeling
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input consisting of business flow descriptions to generate structured workflow models and guide CLI operations.
- Ingestion points:
SKILL.md(accepts user-provided text for business context, actors, and process steps). - Boundary markers: Absent; the instructions do not define specific delimiters or instructions to prevent the agent from accidentally executing commands embedded within the user's business text.
- Capability inventory: The skill is designed to work with the
acomoskill, which includes command-line capabilities such asacomo createWorkflowModelmentioned inSKILL.mdandpatterns.md. - Sanitization: Absent; the skill lacks explicit validation or escaping of user input before it is included in generated drafts or documentation.
Audit Metadata