workos
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform API requests for managing enterprise authentication resources such as organizations, SSO connections, and SCIM directories. - [COMMAND_EXECUTION]: Employs a diagnostic utility
zero doctorto verify the status of the environment variable and API connectivity. This tool is consistent with the vendor's own ecosystem. - [DATA_EXFILTRATION]: Transmits data to the official
api.workos.comdomain using theWORKOS_TOKENenvironment variable for authentication. WorkOS is a well-known enterprise service provider. - [SAFE]: Facilitates data transfer by writing JSON payloads to the
/tmp/directory before sending them viacurl, which is an expected workflow for providing input to shell commands.
Audit Metadata