tilebox-workflow-releases
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
tileboxCLI to perform core workflow management tasks. This includestilebox workflow initfor project scaffolding,tilebox workflow publish-releasefor artifact creation, andtilebox workflow deploy-releasefor cluster management. These operations are essential to the skill's purpose and are executed within the user's project environment. - [INDIRECT_PROMPT_INJECTION]: The skill defines an 'Implicit Project Route' where the agent interprets geospatial prompts as authorization to initialize and deploy workflows. This presents an attack surface where processed data could influence agent actions.
- Ingestion points: Implicit geospatial prompts routed to the agent in
SKILL.md. - Boundary markers: The instructions include explicit constraints, such as requiring 'explicit production intent' and respecting 'code only' or 'do not deploy' directives.
- Capability inventory: Access to
tileboxCLI commands for project initialization, file creation (cat > tilebox.workflow.toml), release publishing, and cluster deployment. - Sanitization: The skill emphasizes the use of
uv.lockfor deterministic dependency management and SHA-256 digests for release artifact verification. - [EXTERNAL_DOWNLOADS]: The skill provides examples for configuring package sources in
pyproject.toml, specifically referencing the official PyTorch CPU wheel index (https://download.pytorch.org/whl/cpu). These references target well-known, established services for software distribution.
Audit Metadata