framer-ci-integration
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill defines a workflow in
scripts/sync-and-publish.tsthat is susceptible to indirect prompt injection from external data sources. - Ingestion points: Data is ingested from an external API endpoint (
https://your-api.com/posts) within themainfunction of the sync script. - Boundary markers: There are no delimiters or instructions to ignore embedded commands within the fetched content before processing.
- Capability inventory: The script possesses the capability to modify the Framer CMS state via
blogCollection.setItemsand to perform a production deployment viaclient.publish. - Sanitization: The script directly maps external fields (
p.title,p.content,p.slug) to CMS field data without validation or sanitization, potentially allowing malicious content from a compromised API to influence the site environment.
Audit Metadata