workflows-install
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the official
@zapier/zapier-sdk-clipackage from the public npm registry. - [EXTERNAL_DOWNLOADS]: Downloads companion skills (such as
workflows-doctorandworkflows-create) from the officialzapier/agent-skillsrepository on GitHub using thenpx skills addcommand. - [COMMAND_EXECUTION]: Executes system commands to verify the presence and versioning of Node.js, npm, and git.
- [COMMAND_EXECUTION]: Uses the
zapier-sdkCLI to check profile information and verify access to experimental workflow features. - [SAFE]: Authentication is handled via the official browser-based
zapier-sdk loginflow, which prevents the agent or skill from directly handling sensitive user credentials.
Audit Metadata