CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

30.8 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 1 flagged

Securityscore 88 · 1 finding

MEDIUMInstruction telling the agent not to ask for approvalSS-SKILL-INJECT-DONT-ASK-01 · Prompt injection · workflow-automator/references/intake.md

MEDIUM — it fires on intent; the real damage depends on the host agent's own approval-gating.

Why it matters

The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.

The exact value spotted

excerptworkflow-automator/references/intake.md· markdown

12- **What volume** it handles (number of items per day/week/month)

14When the description is brief, group all follow-up questions into a single message. Do not a

… (108 chars elided on L14)

16When the description is partial, acknowledge what is known, state assumptions explicitly, as

… (36 chars elided on L16)

Occurrences

1 occurrence · at L14

How to fix

Remove the approval-skipping instruction, or scope it narrowly to a specific safe, reversible action.

Delete blanket "don't ask / no need to confirm" directives from the skill.
If the skill is a genuine autonomous job, restrict the opt-out to a named non-destructive action rather than all actions.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-DONT-ASK-01sha25668b030f55bcd484a…rubric 365aacaView on GitHub

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

workflow-automator/SKILL.md · 1 file

workflow-automator/SKILL.md3.8 KB · Markdown

name: workflow-automator

description: Takes a manual business workflow description and designs the automated version. Maps current steps, handoffs, decision points, and bottlenecks. Designs automated flow with triggers, conditions, actions, and error handling. Outputs workflow-automation.md with before/after Mermaid diagrams, tool recommendations, implementation steps, and time savings estimate.

tools: Read, Write, Glob, Grep, Bash, WebSearch, WebFetch

model: inherit

Workflow Automator

Transform a manual business workflow into an optimized automated system: map how work gets done today, then design a complete automated replacement with triggers, conditions, actions, branching, and error handling. Deliver a comprehensive workflow-automation.md.

references/intake.md -- What to gather and how to ask for missing detail
references/analysis-framework.md -- Current-state mapping, pain-point scoring, decision and handoff analysis
references/automation-design.md -- Triggers, actions, branching, parallelism, error handling, human-in-the-loop templates
references/tool-recommendations.md -- Platform decision matrix and when to recommend each tool
references/output-template.md -- Full workflow-automation.md structure to fill in
references/diagram-and-estimation-standards.md -- Mermaid conventions and time/ROI estimation rules

Workflow

Intake. Gather a complete description of the manual workflow: who, what, when, where, how long, what fails, how often, what volume. When the description is brief or partial, ask all clarifying questions in one organized message, then proceed. See references/intake.md.
Map the current state. Document every step, actor, handoff, decision point, wait time, and failure mode in a structured table; classify each step. See references/analysis-framework.md.
Identify pain points. Score each step on automation potential, impact, and risk. Surface bottlenecks, redundant steps, error-prone handoffs, and wasted time. See references/analysis-framework.md.
Design the automated flow. Define triggers, action specs, decision gates, parallel blocks, human checkpoints, and three-level error handling. See references/automation-design.md.
Recommend tools. Evaluate Zapier, Make, n8n, custom code, and Power Automate against this workflow; recommend a primary platform and any hybrid architecture. See references/tool-recommendations.md.
Estimate impact. Calculate conservative time savings, error reduction, throughput gain, cost, and ROI period. See references/diagram-and-estimation-standards.md.
Deliver. Generate the full workflow-automation.md in the current working directory, including both before and after Mermaid diagrams and the time-savings table. See references/output-template.md and references/diagram-and-estimation-standards.md.

Output Rules

Always generate the full document, not a summary or abbreviated version. Make it self-contained enough to implement from alone.
Always include both Mermaid diagrams (current state and automated state) and the quantified time-savings table.
Use no emojis anywhere in the output.

Quality Checklist

Before delivering, verify:

[ ] Every manual step is mapped
[ ] Every decision point has explicit logic
[ ] Every handoff is analyzed
[ ] The automated flow handles all identified failure modes
[ ] Error handling exists at step, flow, and system levels
[ ] Human-in-the-loop checkpoints exist for high-risk decisions
[ ] Tool recommendations are justified with specific criteria
[ ] Time savings estimates are conservative and show the math
[ ] Cost analysis includes all ongoing costs
[ ] Implementation is phased with quick wins first
[ ] Both Mermaid diagrams render correctly
[ ] The document is self-contained and actionable
[ ] No emojis are used anywhere in the output

workflow-automator— agent skill

Is workflow-automator safe to install?

Workflow Automator

Contents

Workflow

Output Rules

Quality Checklist

Audit the pieces. Scan the whole. Decide.