스킬 gtm-workflow

📦

gtm-workflow

Name: gtm-workflow
Author: eliasstravik

콘텐츠 리비전 r1 중간 위험 🔑 환경 변수🌐 네트워크 접근📁 파일 시스템 접근⚡ 스크립트 포함⚙️ 외부 명령어

Build and manage GTM workflows

Reusable GTM work needs consistent setup, testing, approvals, and run tracking. This skill creates and maintains workflow projects with cost-aware checks and deployment steps.

지원: Claude Codex Code(CC)

📊 72 적절함

Maintain this Skill? Claim it 📊 72 적절함

설치 전에 중지하고 확인을 요청하세요.

계획을 검토하고 파일을 변경하기 전에 사용자의 명시적 동의를 받으세요.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "gtm-workflow" from https://skillstore.io/skills/eliasstravik-gtm-workflow.md and its manifest at https://skillstore.io/api/skills/eliasstravik-gtm-workflow/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/eliasstravik-gtm-workflow.md 서명된 manifest GET /api/skills/eliasstravik-gtm-workflow/manifest 서명된 lockfile GET /api/skills/eliasstravik-gtm-workflow/lockfile

테스트해 보기

"gtm-workflow" 사용 중입니다. Create a workflow for a small lead list.

예상 결과:

Workflow plan with inputs, result table, and one-row test
Approval card describing saved changes, cost, and external effects
Verification result and workflow diagram after testing

"gtm-workflow" 사용 중입니다. Check the latest deployed workflow run.

예상 결과:

Run status and completion summary
Recorded cost and row outcome counts
Plain-language failure reason when a run does not complete

보안 감사

중간 위험

v1 • 2026. 9. 11. 버전별 보고서 열기

The 400 static matches are predominantly scanner false positives: lockfile integrity hashes, ordinary key identifiers, documentation, and bounded workflow tooling. No hidden payload, prompt injection, credential exfiltration, or command injection was found in the reviewed context. The optional installer persistently modifies user-level Claude Code hook configuration and should require explicit informed consent. Static review was capped at 400/1755 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

스캔된 파일

15,404

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (1)

중간

SKILL.md:53 scripts/command-permission.mjs:162-172

Persistent global hook installation

The optional installer writes PreToolUse hooks into the user-level Claude Code settings file. This creates persistent command interception outside an individual workflow project and warrants explicit informed consent.

The skill explicitly instructs users to run the installer, and the installer writes hook entries to ~/.claude/settings.json. The behavior is transparent and opt-in, but it is persistent global configuration.

위험 요인

🔑 환경 변수 (50)

🌐 네트워크 접근 (50)

📁 파일 시스템 접근 (50)

references/library.md:23 references/library.md:24 references/library.md:25 references/library.md:26 references/library.md:27 scripts/command-permission.mjs:4 scripts/command-permission.mjs:4 scripts/command-permission.mjs:24 scripts/command-permission.mjs:33 scripts/command-permission.mjs:82 scripts/command-permission.mjs:125 scripts/command-permission.mjs:141 scripts/command-permission.mjs:133 scripts/setup-workflow-project.sh:19 scripts/setup-workflow-project.sh:4 scripts/setup-workflow-project.sh:10 scripts/setup-workflow-project.sh:13 SKILL.md:38 SKILL.md:69 templates/.gitignore:1 templates/lib/agent-stage.ts:1 templates/lib/agent-stage.ts:73 templates/lib/agent.ts:103 templates/lib/agent.ts:2 templates/lib/agent.ts:85 templates/lib/diagram-svg.ts:2 templates/lib/diagram-svg.ts:112 templates/lib/diagram-svg.ts:122 templates/lib/diagram-svg.ts:112 templates/lib/diagram-svg.ts:2 templates/lib/diagram-svg.ts:119 templates/lib/rows.ts:239 templates/package-lock.json:2528 templates/package-lock.json:2531 templates/package-lock.json:3430 templates/package-lock.json:3450 templates/package-lock.json:3452 templates/package-lock.json:3613 templates/package-lock.json:3626 templates/package-lock.json:3628 templates/package-lock.json:4885 templates/package-lock.json:5020 templates/package-lock.json:5022 templates/package-lock.json:9408 templates/package-lock.json:9463 templates/package-lock.json:4106 templates/package-lock.json:9030 templates/package-lock.json:9032 templates/package.json:8 templates/scripts/generate-migration.mjs:10

⚡ 스크립트 포함 (12)

scripts/command-permission.mjs:92 scripts/setup-workflow-project.sh:20 scripts/setup-workflow-project.sh:21 templates/lib/db.ts:14 templates/lib/db.ts:14 templates/lib/db.ts:14 templates/lib/db.ts:23 templates/lib/db.ts:58 templates/lib/db.ts:149 templates/package.json:12 templates/scripts/gtm.ts:48 templates/scripts/gtm.ts:72

⚙️ 외부 명령어 (50)

감사자: claude

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/eliasstravik-gtm-workflow/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/eliasstravik-gtm-workflow/security.svg)](https://skillstore.io/skills/eliasstravik-gtm-workflow?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/eliasstravik-gtm-workflow?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/eliasstravik-gtm-workflow/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/eliasstravik-gtm-workflow.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

eliasstravik. (2026). gtm-workflow security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/eliasstravik-gtm-workflow/audits/1

BibTeX 인용

@techreport{eliasstravik-eliasstravik-gtm-workflow-2026,
  author = {eliasstravik},
  title = {gtm-workflow security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/eliasstravik-gtm-workflow/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "gtm-workflow security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "eliasstravik"
date-released: "2026-09-11"
url: "https://skillstore.io/skills/eliasstravik-gtm-workflow/audits/1"
identifiers:
  - type: other
    value: "skillstore:eliasstravik-gtm-workflow:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Create a lead enrichment workflow

Build a repeatable workflow that validates rows, enriches records, and stores results after a one-row test.

Operate a deployed workflow

Inspect recent runs, query stored results, approve a checkpoint, or cancel an active workflow.

Maintain workflow infrastructure

Add a migration, update a schedule, verify deployment readiness, and prepare a controlled release.

이 프롬프트를 사용해 보세요

Create a first workflow

Create a reusable workflow that validates a small list of leads. Include a one-row test and explain the approval needed before running it.

Inspect a run

Inspect the latest run for the lead-enrichment workflow. Summarize its status, cost, completed rows, and failures.

Add a safe schedule

Add a weekday schedule to the account-refresh workflow. Verify the workflow and show the external effects before deployment.

Update with controls

Update the enrichment workflow to add an agentic research stage. Set a per-row spend cap, add Diagram cost metadata, test one row, and request approval before deployment.

모범 사례

Use a one-row test and review its projected cost before every new workflow run.
Keep credentials in environment variables and do not commit local data or environment files.
Review migration effects and request fresh approval when costs or external effects change.

피하기

Do not use this skill for one-off work that should not become a reusable workflow.
Do not run a full workflow before verification and explicit approval.
Do not store secrets, test data, or generated runtime files in version control.