ai-automation-workflows

Warn

Audited by Gen Agent Trust Hub on Mar 7, 2026

Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DATA_EXFILTRATION]: The monitoring script monitored_workflow.sh demonstrates sending execution results and error logs to an external URL using curl. This provides a mechanism for data to be transmitted outside the local environment.
  • [COMMAND_EXECUTION]: The skill documentation includes instructions for setting up persistent automation using crontab, allowing scripts to run on a recurring schedule. It also utilizes subprocess.run in Python and extensive Bash scripting to interact with the system and the infsh CLI.
  • [PROMPT_INJECTION]: The data_processing.sh template demonstrates an indirect prompt injection surface. Ingestion points: The script reads raw content from local text files in ./data/raw/. Boundary markers: Absent. Capability inventory: Use of infsh app run for AI tasks and curl for network operations across scripts. Sanitization: Absent; content is used without validation or escaping.
  • [EXTERNAL_DOWNLOADS]: The documentation suggests installing dependencies using npx, which downloads and executes packages from external registries.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 7, 2026, 12:10 PM