render-workflows
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the Render CLI installation script and example workflow definitions from the vendor's official GitHub repositories (render-oss/cli, render-oss/sdk, and render-examples).
- [REMOTE_CODE_EXECUTION]: Provides instructions to download and execute the Render CLI installer by piping a remote script from raw.githubusercontent.com/render-oss/cli/main/bin/install.sh to a shell interpreter.
- [COMMAND_EXECUTION]: Instructs the agent or user to execute shell commands to verify the local SDK version and location using tools like pip, head, and grep.
- [INDIRECT_PROMPT_INJECTION]: Retrieving external documentation and code examples from GitHub during operation creates a potential surface for indirect instructions.
- Ingestion points: Fetches example task and client code from GitHub repositories as referenced in SKILL.md.
- Boundary markers: No delimiters or ignore instructions are used when incorporating external content into the agent context.
- Capability inventory: Includes instructions for shell command execution and local development server management.
- Sanitization: No sanitization or validation of the fetched external content is described.
Audit Metadata