workfront-extension — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited workfront-extension (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Extension specialist for Workfront product extensions built on App Builder (workfront/ui/1).
Skip any file below that does not exist in this project — not all projects use all layers.
docs/design-principles/ exists)docs/design-principles/architecture.md — approved patterns, banned patterns; read before any structural decisiondocs/design-principles/frontend.md — UI framework, component rules, state management, accessibility; read before writing implementation code (load if file exists)docs/impl-log/ exists)Before implementing:
docs/impl-log/frontend/index.md — current component inventory, routes, state patterns in use (required before writing new code)docs/impl-log/frontend/log.md header lines — prior decisions relevant to this taskAt task completion:
docs/impl-log/frontend/index.md in-place to reflect new current statedocs/impl-log/frontend/log.mdweb-src/.DOCUMENTS in ExtensionRegistration (same workfront/ui/1 app — there is no separate document-details extension point)Workfront extensions:
src/workfront-ui-1/web-src/src/workfront-ui-1/actions/src/workfront-ui-1/ext.config.yaml| Task | Load |
|---|---|
| Add document details actions (DOCUMENTS menu) | EXTENSION_REGISTRATION.md |
| Build a mainMenu extension (left-nav portal) | MAIN_MENU_EXTENSION.md |
| Build a secondaryNav tab (Task/Project/Docs/etc.) | SECONDARY_NAV_EXTENSION.md |
| Embed a custom widget in a Workfront custom form | FORMS_WIDGET.md |
| Read IMS token, object ID, user, hostname | SHARED_CONTEXT.md |
| Debug what Workfront is passing to your extension | SHARED_CONTEXT.md (ShowValues component) |
| Register extension point / configure ext.config.yaml | EXTENSION_REGISTRATION.md |
| Attach to host / UIX guest SDK basics | SHELL_INTEGRATION.md |
| Test locally with extensionOverride / fix Chrome 142 | SHELL_INTEGRATION.md |
| Panel/route navigation within extension | NAVIGATION.md |
| Message host app | COMMUNICATION.md |
| Build any UI component | app-builder-frontend skill → REACT_SPECTRUM.md |
| Call backend actions | app-builder-frontend skill → ACTION_WIRING.md |
| Handle IMS auth / token exchange | app-builder-frontend skill → TOKEN_PATTERNS.md |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.