write-script-bunnative
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and instructions for using the official Windmill CLI (
wmill) and SDK (windmill-client). All referenced resources are owned by the vendor, Windmill Labs. - [SAFE]: It explicitly defines the security boundaries of the 'Native' worker, noting that APIs such as filesystem access (
node:fs) and subprocess execution (child_process) are unavailable in this environment. - [SAFE]: The instructions for the
wmill script previewcommand include guidance to run the command only after user confirmation or when explicitly requested, mitigating accidental execution of scripts with side effects. - [SAFE]: The
windmill-clientdocumentation encourages using the SDK's internal authentication mechanisms rather than manually handling sensitive environment variables likeWM_TOKEN.
Audit Metadata