workflow

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFE
Full Analysis
  • Framework Integration Patterns: The skill utilizes standard WDK directives such as "use workflow" and "use step" to define durable orchestration logic and Node.js-capable tasks. These are documented architectural features of the Vercel Workflow ecosystem and do not represent a security risk.- Developer Tooling Mentions: The documentation references standard npx commands (e.g., npx workflow health, npx workflow inspect) for framework debugging and management. These tools originate from the same vendor and are part of the intended development workflow.- Internal Validation Logic: The skill includes configuration rules (validate and chainTo sections) designed to guide developers away from common mistakes, such as using setTimeout in sandboxed environments, which improves the reliability and safety of workflow implementations.- Potential Data Processing Surface: Snippets describing the DurableAgent demonstrate the processing of user-supplied messages through LLM tools. While this constitutes an indirect prompt injection surface (common in AI agent skills), it is used here for educational purposes within code samples and follows standard implementation patterns for conversational agents.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 11:26 AM