workfront-forms-api — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited workfront-forms-api (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
API specialist for Workfront Custom Forms (Category/Parameter objects). Applies to ALL object types — Tasks, Issues/Requests, Projects, Users, Portfolios, Programs, and more. Knows form structure, Category fields, Parameter configurations, and parameterValues read/write patterns.
| Task | Load |
|---|---|
| Understand form structure and hierarchy | FORM_STRUCTURE.md |
| List forms, attach/detach, inspect Category fields | CATEGORY_OBJECT.md |
| Inspect Parameter definitions and display types | PARAMETER_FIELDS.md |
| Read or write parameterValues on any object | PARAMETER_VALUES.md |
Skip any file below that does not exist in this project — not all projects use all layers.
docs/design-principles/ exists)docs/design-principles/architecture.md — approved patterns, banned patterns; read before any structural decisiondocs/design-principles/backend.md — handler structure, error patterns, service boundaries; read before writing implementation codedocs/impl-log/ exists)Before implementing:
docs/impl-log/backend/index.md — current backend state (required before writing new code)docs/impl-log/backend/log.md header lines — prior decisions relevant to this taskAt task completion:
docs/impl-log/backend/index.md in-place to reflect new current statedocs/impl-log/backend/log.mdhttps://<workfront_host>/attask/api/v21.0/Authorization: Bearer <token> (OAuth2 recommended)v21.0 explicitly in productioncategory endpoint, not formDE:{field name}$$FIRST=0&$$LIMIT=100 (max 2000 per request)| Task | Reference |
|---|---|
| Understand form/section/field hierarchy | FORM_STRUCTURE.md |
| List or attach forms (Category object) | CATEGORY_OBJECT.md |
| Inspect parameter definitions | PARAMETER_FIELDS.md |
| Read/write form values on objects | PARAMETER_VALUES.md |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.