qlik-automation-builder
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the bash tool to perform schema validation on the generated workspace JSON. This internal safety check ensures that all authored automations conform to the required JSON Schema Draft 2020-12 specifications before they are finalized.
- [EXTERNAL_DOWNLOADS]: The skill employs npx to fetch the ajv-cli and ajv-formats packages from the official npm registry. These well-known utilities are used solely for the purpose of validating the structure and integrity of the generated automation files.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user instructions and external connector metadata fetched via tools like qlik_get_automation_connector to generate workflow logic. This creates a surface area for indirect prompt injection, which the skill mitigates by requiring robust schema validation and strictly manual trigger modes for all new automations.
- [DYNAMIC_EXECUTION]: The skill is designed to generate CustomCodeBlock3 elements that can contain Python, Node.js, or PHP logic when requested by the user. This generated code is intended for execution within the target Qlik Automate runtime environment to handle complex logic requirements.
Audit Metadata