workflows-install

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches and installs the official @zapier/zapier-sdk-cli package from the public npm registry.
  • [EXTERNAL_DOWNLOADS]: Downloads companion skills (such as workflows-doctor and workflows-create) from the official zapier/agent-skills repository on GitHub using the npx skills add command.
  • [COMMAND_EXECUTION]: Executes system commands to verify the presence and versioning of Node.js, npm, and git.
  • [COMMAND_EXECUTION]: Uses the zapier-sdk CLI to check profile information and verify access to experimental workflow features.
  • [SAFE]: Authentication is handled via the official browser-based zapier-sdk login flow, which prevents the agent or skill from directly handling sensitive user credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 04:23 PM