workflows-create

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of the zapier-sdk CLI to perform administrative tasks, app discovery, and workflow management.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the @zapier/zapier-sdk and @zapier/zapier-durable npm packages, along with zod and typescript. These are legitimate vendor-provided or standard community packages used for the skill's primary function.
  • [REMOTE_CODE_EXECUTION]: The skill generates local TypeScript files based on natural language input and subsequently executes them using the zapier-sdk --experimental run-durable command. This represents dynamic code execution; however, the skill mitigates risk by requiring user review and confirmation of the workflow plan and any potential side effects before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 09:33 PM
Security Audit — agent-trust-hub — workflows-create