workflows-install
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to check for required environment tools (Node.js, npm, git) and to manage the installation and configuration of the Zapier SDK CLI.
- [EXTERNAL_DOWNLOADS]: The skill fetches the official
@zapier/zapier-sdk-clipackage from the npm registry and installs companion skills from thezapier/agent-skillsrepository on GitHub. These are recognized as legitimate vendor resources from Zapier. - [CREDENTIALS_UNSAFE]: The skill invokes
zapier-sdk get-profileto verify the user's authentication status. It follows best practices by instructing the agent not to request passwords, API keys, or tokens directly, instead directing the user to the official interactive browser-based login flow.
Audit Metadata