scenario-workflows

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill suggests installing sibling components via npx skills add scenario-labs/skills. This refers to the official repository of the skill's author, representing standard setup for expanding functionality within the vendor's ecosystem.
  • [COMMAND_EXECUTION]: The skill defines a workflow for the agent to execute specific platform commands such as workflows_list, workflow_run, and job_get. These are intended operations for interacting with the Scenario MCP server to perform legitimate workflow tasks.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes structured workflow data (node graphs and input definitions) from the Scenario API. While processing external data is a potential attack surface, the instructions emphasize reading strict contracts (inputs_definition) and using dry runs for validation before execution, which aligns with secure data handling practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 10:51 PM