workflow-init
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Remote Content Retrieval: The skill fetches framework-specific getting-started guides from
workflow-sdk.dev, which is an official product domain for Vercel Workflow. This ensures the agent uses the most current documentation for setup. - System Interaction and Command Execution: The skill involves standard development actions such as reading
package.json, installing dependencies, and running verification commands likenpx workflow. These operations are consistent with the intended purpose of initializing a new SDK. - Dynamic Documentation Processing: By following external guides, the skill maintains a surface for processing documentation-driven instructions.
- Ingestion points: External guides retrieved from
workflow-sdk.dev. - Boundary markers: Not explicitly implemented in the skill logic.
- Capability inventory: File system access and shell command execution via the agent tools.
- Sanitization: The skill assumes the integrity of the official documentation fetched from the vendor's domain.
Audit Metadata