An inline workflow definition is a workflow submitted dynamically at runtime rather than being created and approved ahead of time. In automation and orchestration platforms, this usually means the workflow arrives as JSON or another structured payload through an API, queue, or UI, and is interpreted immediately by the engine.
This matters in security because runtime-defined workflows can blur the line between configuration and execution. If an attacker can submit or modify inline definitions, they may inject harmful logic, abuse script tasks, or reach sensitive internal functions. Defenders reduce this risk by limiting who can submit inline workflows, validating the schema, separating data from code, and running any embedded execution in a tightly sandboxed environment with minimal host access.