framer-core-workflow-b

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides legitimate documentation and boilerplate code for creating Framer components and overrides. The examples are educational and consistent with the Framer SDK usage.
  • [INDIRECT_PROMPT_INJECTION]: The DataList component in SKILL.md identifies a surface for indirect prompt injection by fetching data from a user-configurable apiUrl.
  • Ingestion points: apiUrl property in the DataList React component within SKILL.md.
  • Boundary markers: None present in the code snippet.
  • Capability inventory: Performs network data retrieval via the fetch API.
  • Sanitization: The fetched data is mapped directly to list items without explicit sanitization, though this is typical for a React template.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 03:54 PM