workflows-doctor
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts and standard development tools (
npm,zapier-sdk,npx) to perform diagnostics and updates. These are routine operations for a developer-oriented skill. - [EXTERNAL_DOWNLOADS]: Fetches and updates official Zapier packages and skills using
npm installandnpx skills update. These downloads target the official npm registry and the author's official GitHub repository (zapier/agent-skills). - [SAFE]: The skill implements a self-throttling 'freshness check' (
scripts/skill-freshness-check.sh) that limits update attempts to once per day per project to avoid unnecessary network traffic and resource usage. This follows best practices for non-blocking background tasks.
Audit Metadata