lindy-migration-deep-dive
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides tools and instructions to ingest and process configuration data and agent instructions from external automation platforms like Zapier, Make, and n8n.\n
- Ingestion points: The
audit_existing_automationsfunction inreferences/implementation.mdreads JSON configuration files from an export directory. TheconsolidateAgentsfunction inreferences/implementation-guide.mdmerges instructions from multiple existing agents.\n - Boundary markers: No explicit delimiters or 'ignore embedded instructions' markers are present in the provided code snippets to isolate imported data.\n
- Capability inventory: The skill environment includes
Bash,Read,Write, andEditcapabilities which could be leveraged if malicious instructions were successfully injected.\n - Sanitization: The skill relies on manual verification, parallel run comparisons, and phased testing rather than automated input sanitization.\n- [EXTERNAL_DOWNLOADS]: The documentation references and links to resources from the official Lindy AI platform and the author's own domains.\n
- Evidence: Links to
docs.lindy.ai,intentsolutions.io, andjeremylongshore.comare used for documentation and resource acquisition.
Audit Metadata