acomo-workflow-modeling

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input consisting of business flow descriptions to generate structured workflow models and guide CLI operations.
  • Ingestion points: SKILL.md (accepts user-provided text for business context, actors, and process steps).
  • Boundary markers: Absent; the instructions do not define specific delimiters or instructions to prevent the agent from accidentally executing commands embedded within the user's business text.
  • Capability inventory: The skill is designed to work with the acomo skill, which includes command-line capabilities such as acomo createWorkflowModel mentioned in SKILL.md and patterns.md.
  • Sanitization: Absent; the skill lacks explicit validation or escaping of user input before it is included in generated drafts or documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 06:05 PM