workflow-review
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and process external data, specifically workflow files and recent execution evidence. This represents an ingestion point for untrusted data that could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: workflow files and recent execution evidence (SKILL.md).
- Boundary markers: None specified in the instructions to separate data from instructions.
- Capability inventory: The skill mentions running 'affected steps and tests,' implying the agent may have execution capabilities in the environment.
- Sanitization: No sanitization or validation of the external content is mentioned.
Audit Metadata