brandfy-diagnostico
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data (project files such as CSS, markdown manuals, and branding assets) to create an inventory and diagnostic report. This creates a potential surface for indirect prompt injection if these processed files contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: The skill reads files within the
.brandfy/andbrand/directories, as well as any files cited by the user (documented in SKILL.md). - Boundary markers: Instructions specify separating facts from hypotheses and verifying findings in original files, but they do not define explicit delimiters or instructions to ignore embedded prompts within the audited content.
- Capability inventory: The skill is limited to reading local files and writing a diagnostic report to
.brandfy/diagnostico.md. It does not possess network access, arbitrary command execution, or dynamic code evaluation capabilities. - Sanitization: There is no evidence of content sanitization, filtering, or escaping for the data read from project files before it is processed by the agent.
Audit Metadata