workflow
Creates durable, resumable workflows using Vercel's Workflow DevKit for efficient multi-step operations.
Install this skill
or
71/100
Security score
The workflow skill was audited on May 21, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 81
Template literal with variable interpolation in command context
SourceSKILL.md
| 81 | const response = await fetch(`https://api.example.com/users/${userId}`); |
medium line 90
Template literal with variable interpolation in command context
SourceSKILL.md
| 90 | prompt: `Process: ${JSON.stringify(data)}`, |
medium line 142
Template literal with variable interpolation in command context
SourceSKILL.md
| 142 | return `Results for "${query}"`; |
medium line 250
Template literal with variable interpolation in command context
SourceSKILL.md
| 250 | token: `chat-${channelId}`, |
medium line 282
Template literal with variable interpolation in command context
SourceSKILL.md
| 282 | throw new FatalError(`Client error: ${res.status}`); |
low line 56
Webhook reference - potential data exfiltration
SourceSKILL.md
| 56 | import { sleep, fetch, createHook, createWebhook, getWritable } from "workflow"; |
low line 61
Webhook reference - potential data exfiltration
SourceSKILL.md
| 61 | import { start, getRun, resumeHook, resumeWebhook } from "workflow/api"; |
low line 40
External URL reference
SourceSKILL.md
| 40 | - **Website**: https://useworkflow.dev |
low line 81
External URL reference
SourceSKILL.md
| 81 | const response = await fetch(`https://api.example.com/users/${userId}`); |
Scanned on May 21, 2026
View Security Dashboard