workflows-list
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
zapier-sdkCLI tool to interact with the Zapier platform, performing actions like listing workflows, retrieving profile information, and fetching workflow runs. - [INDIRECT_PROMPT_INJECTION]: The skill processes workflow metadata (names, descriptions, and trigger details) from the authenticated Zapier account. This is a standard surface for skills that handle structured data from an API.
- Ingestion points: JSON output from
zapier-sdkcommands inSKILL.md. - Boundary markers: The skill explicitly directs the agent to parse JSON output, providing structural boundaries.
- Capability inventory: Execution of
zapier-sdkcommands for account management and workflow retrieval. - Sanitization: The skill relies on the structured nature of the CLI's JSON output and does not specify additional string sanitization for formatted presentation.
Audit Metadata