What happens

In a Slack thread a person wrote: "Run a code review workflow on ". The chat agent read the thread, loaded a code-review skill, cloned the repository into its own sandbox, checked out the pull request and started to read the code: eleven tool calls. The person cancelled the turn and wrote "use the software factory workflow code review". Only then did the agent call software_factory_review.

The first attempt at that call failed too: it sent {"pr": "<url>"} and got a 422, then retried with repo and prNumber.

Why

backend/druks/chat/templates/bot.md tells the agent what tools it holds. It does not tell it that a workflow is the way to do a job that an app owns, and that its own sandbox is for reading and small checks. The word "workflow" in the request was not enough.

Proposal

Add one rule to the prompt: when an installed app has a workflow for the task, start that workflow and do not do the task in the sandbox. Name the start tools in the sentence, so the agent does not look for them.