skills/vercel/workflow/workflow-init/Gen Agent Trust Hub

workflow-init

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • Remote Content Retrieval: The skill fetches framework-specific getting-started guides from workflow-sdk.dev, which is an official product domain for Vercel Workflow. This ensures the agent uses the most current documentation for setup.
  • System Interaction and Command Execution: The skill involves standard development actions such as reading package.json, installing dependencies, and running verification commands like npx workflow. These operations are consistent with the intended purpose of initializing a new SDK.
  • Dynamic Documentation Processing: By following external guides, the skill maintains a surface for processing documentation-driven instructions.
  • Ingestion points: External guides retrieved from workflow-sdk.dev.
  • Boundary markers: Not explicitly implemented in the skill logic.
  • Capability inventory: File system access and shell command execution via the agent tools.
  • Sanitization: The skill assumes the integrity of the official documentation fetched from the vendor's domain.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 06:28 PM