framer-core-workflow-b
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate documentation and boilerplate code for creating Framer components and overrides. The examples are educational and consistent with the Framer SDK usage.
- [INDIRECT_PROMPT_INJECTION]: The
DataListcomponent inSKILL.mdidentifies a surface for indirect prompt injection by fetching data from a user-configurableapiUrl. - Ingestion points:
apiUrlproperty in theDataListReact component withinSKILL.md. - Boundary markers: None present in the code snippet.
- Capability inventory: Performs network data retrieval via the
fetchAPI. - Sanitization: The fetched data is mapped directly to list items without explicit sanitization, though this is typical for a React template.
Audit Metadata