migrating-to-workflow-sdk
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- Structured Migration Framework: The skill defines clear rules for porting various constructs (Activities, Signals, Task Tokens) into the Workflow SDK environment. It correctly identifies and maps equivalent features while removing legacy framework boilerplate.- Encapsulation of Side Effects: The instructions prioritize security and reliability by mandating that side effects, database calls, and network operations be placed within 'use step' functions, while orchestration remains in 'use workflow' contexts. This prevents non-deterministic behavior in long-running workflows.- Safe Code Templates: The provided reference materials contain standard TypeScript examples for handling webhooks, hooks, and child workflows. These templates follow industry best practices, such as using idempotency keys for external writes and avoiding hardcoded secrets.- Internal Validation Checkpoints: The skill includes an extensive verification checklist designed to prevent the generation of insecure or incorrect code patterns, such as improper stream handling or misconfigured resume surfaces.- Framework Agnosticism: The guidelines provide options for both managed and self-hosted environments, ensuring that deployment-specific infrastructure requirements (like 'World' implementations for storage and queueing) are explicitly documented and separate from the business logic.
Audit Metadata