triggers
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as documentation for API endpoints and MCP tools used to manage and trigger workflows. No executable code or malicious instructions are present.
- [EXTERNAL_DOWNLOADS]: The documentation references
fly.dev, which is the default domain for Fly.io, a well-known cloud platform service. These references are used to illustrate URL patterns and do not involve untrusted downloads. - [CREDENTIALS_UNSAFE]: The file describes authentication using Ed25519 JWT tokens but correctly uses placeholders like
{token}for demonstration. No hardcoded credentials or secrets were found. - [COMMAND_EXECUTION]: While the skill mentions tools like
run_workflowandrun_node, these are described as interfaces for a structured workflow system rather than arbitrary shell command execution.
Audit Metadata