argent-create-flow
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted application data and user-defined flow files to automate UI interactions.
- Ingestion points: Application UI hierarchies are read via tools like
describeandnative-full-hierarchy(references/flow-yaml.md). - Boundary markers: Instructions mandate the use of stable selectors (ids, text) and verification gates (identity and readiness checks) to ensure correct execution (SKILL.md).
- Capability inventory: The skill utilizes tools to launch apps, perform UI gestures, and execute scripts (flow-yaml.md).
- Sanitization: A dedicated secret management system is described to prevent credential leakage in reports and logs (references/live-authoring.md).
- [DYNAMIC_EXECUTION]: The skill allows the inclusion of local JavaScript modules within automation flows.
- The
script:directive in flow YAML files enables execution of.mjsscripts (flow-yaml.md). - The
flow-add-scripttool integrates these scripts during the recording phase (references/live-authoring.md). - [COMMAND_EXECUTION]: The skill uses specialized tools to manage the lifecycle of target applications and devices.
- Commands like
restart-app,launch, andstop-all-simulator-serversare essential for establishing a clean test environment (references/reliability-and-recovery.md). - Safety documentation advises on the scope of these commands to avoid unintended side effects on concurrent sessions.
Audit Metadata