flows-install
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads official Flows SDK packages including
@flows/react,@flows/react-components,@flows/js, and@flows/js-componentsfrom the NPM registry. - [COMMAND_EXECUTION]: Executes shell commands using package managers (npm, pnpm, yarn, or bun) to install dependencies and configure the environment.
- [REMOTE_CODE_EXECUTION]: Installs an additional maintenance skill using
npx skills add RBND-studio/flows.sh. This is a vendor-owned resource provided by the skill author for extended functionality. - [INDIRECT_PROMPT_INJECTION]: The skill reads project metadata (e.g.,
package.json, lock files,tsconfig.json) to determine the technical stack. This analysis determines which code templates and dependencies are applied to the project. - Ingestion points: project structure,
package.json,pnpm-lock.yaml,yarn.lock,bun.lock,package-lock.json,tsconfig.json. - Boundary markers: No explicit delimiters are used for the content of these files.
- Capability inventory: File writing/modification, shell command execution (
npm install,npx). - Sanitization: Not explicitly performed; the skill uses substring matching for framework detection.
Audit Metadata