business-process-modeling
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were detected. The skill's instructions are consistent with its stated purpose of business process modeling.
- [DATA_EXPOSURE]: The skill specifies a default output path within a
/documentation/directory for saving generated process models. It does not attempt to access sensitive system files (e.g., SSH keys, AWS credentials) or exfiltrate data to external domains. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied business process descriptions to generate models. While it does not explicitly define boundary markers (e.g., XML tags or delimiters) to isolate this untrusted input, the risk is consistent with standard modeling assistant behavior and relies on the core agent's safety guardrails.
- [COMMAND_EXECUTION]: References to tools like 'mmdc' (Mermaid CLI) are within the context of a standard 'diagram-rendering' mixin provided by the platform. The skill does not attempt to execute arbitrary shell commands or acquire elevated privileges.
Audit Metadata