asc-workflow
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional, detailing the use of the
ascCLI tool for managing repository-local workflows via theasc workflowcommand suite. - [COMMAND_EXECUTION]: The skill describes the execution of shell commands as the primary intended function of the documented
asc workflow runcommand. These commands are defined within a local.asc/workflow.jsonfile and are executed using the system shell (bashorsh). This is standard behavior for automation tools and is documented with security best practices, such as recommending the use of CI secrets for sensitive data instead of hardcoding them in the configuration file. - [SAFE]: No obfuscation, data exfiltration patterns, unauthorized network operations, or malicious injections were detected. The skill focuses on legitimate developer productivity and automation workflows.
Audit Metadata