write-script-python3
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
wmillCLI for script management tasks such aspreview,run,generate-metadata, andsync push. These tools are standard for the platform's development workflow. - [REMOTE_CODE_EXECUTION]: The provided Windmill Python SDK contains methods like
run_script_by_path,run_inline_script_preview, andrun_flow_async, which allow for dynamic code execution and job management on the Windmill platform. This is the intended functionality of the skill. - [DATA_EXFILTRATION]: The SDK includes methods such as
get_variable,get_resource,load_s3_file, andwrite_s3_file. These allow scripts to access and manipulate workspace data, secrets, and external storage as required by the platform's operational model.
Audit Metadata