workflow-scan
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
trellis -vcommand to identify the current environment version and resolve local directory paths (e.g.,/tmp/trellis-{VERSION}-2/). This is an intended functional requirement for environment discovery. - [DATA_EXPOSURE]: The skill accesses local files within the
/tmp/trellis-*directory to perform its analysis. The findings are restricted to a report file (WORKFLOW_QUESTIONS.md) written within the same local directory. There is no evidence of network transmission or exfiltration. - [SAFE]: The skill follows least-privilege principles by explicitly stating it is 'scan only' and does not edit source code or execute autonomous agent tasks. All analysis is grounded in local filesystem state.
Audit Metadata