workflow
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- Framework Integration Patterns: The skill utilizes standard WDK directives such as
"use workflow"and"use step"to define durable orchestration logic and Node.js-capable tasks. These are documented architectural features of the Vercel Workflow ecosystem and do not represent a security risk.- Developer Tooling Mentions: The documentation references standardnpxcommands (e.g.,npx workflow health,npx workflow inspect) for framework debugging and management. These tools originate from the same vendor and are part of the intended development workflow.- Internal Validation Logic: The skill includes configuration rules (validateandchainTosections) designed to guide developers away from common mistakes, such as usingsetTimeoutin sandboxed environments, which improves the reliability and safety of workflow implementations.- Potential Data Processing Surface: Snippets describing theDurableAgentdemonstrate the processing of user-supplied messages through LLM tools. While this constitutes an indirect prompt injection surface (common in AI agent skills), it is used here for educational purposes within code samples and follows standard implementation patterns for conversational agents.
Audit Metadata