workflows-create
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the Zapier platform using the
zapier-sdkCLI to perform discovery, connection management, and workflow deployment.\n- [DYNAMIC_EXECUTION]: A Node.js script is executed to check the npm registry and select versions that are at least 24 hours old to ensure compatibility with the sandbox environment.\n- [EXTERNAL_DOWNLOADS]: The skill manages dependencies from the npm registry, including official@zapierpackages andzod. These are either vendor-owned or well-known public packages.\n- [REMOTE_CODE_EXECUTION]: Generated workflow code is executed using the experimentalrun-durablecommand of the Zapier SDK, which facilitates testing in a controlled sandbox.\n- [INDIRECT_PROMPT_INJECTION]: The skill creates executable code based on natural language user requests, which is a potential injection surface.\n - Ingestion points: The user's natural language request defines the workflow logic in Phase 1.\n
- Boundary markers: The agent is instructed to summarize the plan and obtain explicit user confirmation before generating any code.\n
- Capability inventory: The skill can write files to the filesystem and execute SDK commands that interact with external services via the user's account.\n
- Sanitization: No explicit sanitization of the natural language input is described in the instructions.
Audit Metadata