create-workflow-dotnet — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited create-workflow-dotnet (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill describes how to create a Dapr Workflow application using .NET.
You MUST follow these phases in strict order:
## Show final message section. Do NOT add any other text, summary, or commentary after it.The following must be installed by the user before this skill can run:
Additional runtime dependencies (handled during project setup):
Dapr.Workflow version 1.18.4docker run -p 8080:8080 ghcr.io/diagridio/diagrid-dashboard:latestIf you don't have enough context what to build, ask the user the following clarifying questions one by one using an interview style:
Create the project root folder inside the current location where the terminal is open, then create a new ASP.NET Core web application inside it:
mkdir <ProjectRoot>
cd <ProjectRoot>
dotnet new web -n <ProjectName>
dotnet add <ProjectName> package Dapr.Workflow --version 1.18.4The <ProjectName> should start with the <ProjectRoot> and end with App: <ProjectRoot>App.
<ProjectRoot>/
├── .gitignore
├── dapr.yaml
├── local.http
├── resources/
│ └── statestore.yaml
└── <ProjectName>/
├── <ProjectName>.csproj
├── Program.cs
├── Properties/
│ └── launchSettings.json
├── Models/
│ └── <ModelName>.cs
├── Workflows/
│ └── <WorkflowName>.cs
└── Activities/
└── <ActivityName>.csVisual Studio style .gitignore file in the project root. Ignores build output (bin, obj), debug/release folders, and other common .NET artifacts. See REFERENCE.md for full example.
Multi-app run file in the project root. Configures the Dapr sidecar and points to the resources folder. See REFERENCE.md for full example and key points.
Dapr Workflow requires a state store component (with actorStateStore set to "true"). See REFERENCE.md for full example and key points.
Configures the application port, which must match appPort in dapr.yaml. See REFERENCE.md for full example.
Standard ASP.NET Core web project targeting net10.0 with the Dapr.Workflow package. See REFERENCE.md for full example.
Record types for workflow and activity input/output, placed in a Models folder. Must be serializable since Dapr persists workflow state. See REFERENCE.md for full example and key points.
Uses AddDaprWorkflow() to register the Dapr Workflow runtime (workflows and activities are auto-registered). Uses DaprWorkflowClient to schedule workflow instances and query status via HTTP endpoints. See REFERENCE.md for full example and key points.
Inherits from Workflow<TInput, TOutput>, overrides RunAsync, and orchestrates activities via context.CallActivityAsync. Must be internal sealed. Place in a Workflows folder/namespace. See REFERENCE.md for full example, key points, determinism rules, and workflow patterns (chaining, fan-out/fan-in, sub-workflows).
Inherits from WorkflowActivity<TInput, TOutput>, overrides RunAsync, and contains the actual business logic. Must be internal sealed. Place in an Activities folder/namespace. See REFERENCE.md for full example and key points.
HTTP request file for testing the workflow endpoints. Contains a start request (POST) to schedule a new workflow instance and a status request (GET) to query the workflow state. Uses the <app-port> from launchSettings.json. See REFERENCE.md for full example.
IMPORTANT: After Project Setup you MUST show these exact verification instructions:
dotnet build on the csproj file to check for build errors.dapr run -f . in the project root to start the workflow app.IMPORTANT: After Verify you MUST run these instructions:
Create a README.md file inside the <ProjectRoot> folder.
The README contains the following sections:
local.http file.See REFERENCE.md for additional instructions on running locally and running with Catalyst.
IMPORTANT: This is the LAST step. After Create README.md, your final output MUST be ONLY the message below — no preamble, no summary, no additional commentary, only replace the <ProjectRoot> with the actual value:
The <ProjectRoot> workflow application is created. Open the README.md file in the <ProjectRoot> folder for a summary and instructions for running locally.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.