workflow-scan

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the trellis -v command to identify the current environment version and resolve local directory paths (e.g., /tmp/trellis-{VERSION}-2/). This is an intended functional requirement for environment discovery.
  • [DATA_EXPOSURE]: The skill accesses local files within the /tmp/trellis-* directory to perform its analysis. The findings are restricted to a report file (WORKFLOW_QUESTIONS.md) written within the same local directory. There is no evidence of network transmission or exfiltration.
  • [SAFE]: The skill follows least-privilege principles by explicitly stating it is 'scan only' and does not edit source code or execute autonomous agent tasks. All analysis is grounded in local filesystem state.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 02:55 PM