workflow-builder
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of a comprehensive set of documentation and code examples for implementing workflow-based editors using the React Flow library. Analysis of the provided scripts and instructions revealed no evidence of malicious behavior, data exfiltration, or unauthorized system access.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of industry-standard dependencies from public registries including:
@xyflow/reactandzustandfor core functionality.@dagrejs/dagreandelkjsfor automated layout algorithms.zundofor history management.- [DATA_EXFILTRATION]: The skill provides patterns for legitimate data persistence, such as saving flow states to an application's own API endpoints (
/api/flows/) or using local browser storage. These operations are within the expected scope of a front-end workflow editor. - [PROMPT_INJECTION]: While the skill processes user-defined workflow schemas, it explicitly instructs developers to treat this input as untrusted and perform rigorous server-side validation, adhering to secure development practices.
Audit Metadata