workflow-builder

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists of a comprehensive set of documentation and code examples for implementing workflow-based editors using the React Flow library. Analysis of the provided scripts and instructions revealed no evidence of malicious behavior, data exfiltration, or unauthorized system access.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of industry-standard dependencies from public registries including:
  • @xyflow/react and zustand for core functionality.
  • @dagrejs/dagre and elkjs for automated layout algorithms.
  • zundo for history management.
  • [DATA_EXFILTRATION]: The skill provides patterns for legitimate data persistence, such as saving flow states to an application's own API endpoints (/api/flows/) or using local browser storage. These operations are within the expected scope of a front-end workflow editor.
  • [PROMPT_INJECTION]: While the skill processes user-defined workflow schemas, it explicitly instructs developers to treat this input as untrusted and perform rigorous server-side validation, adhering to secure development practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 05:31 PM