inboundfy-auditoria-seo
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted content from external sources, creating a potential vector for indirect prompt injection.
- Ingestion points: The skill instructions in
REFERENCIA.mdrequire the agent to read external data including "intenção, título, description, headings, cobertura, links internos, fontes, dados estruturados, URL e experiência de leitura." - Boundary markers: The skill does not provide specific instructions or delimiters to isolate untrusted content or warn the agent to ignore embedded instructions within the audited material.
- Capability inventory: The skill has the capability to write and update files, specifically generating SEO reports and updating audit briefs (
SKILL.md,REFERENCIA.md). - Sanitization: There are no explicit sanitization, filtering, or escaping mechanisms defined for the external content before it is processed by the agent or included in the final report artifacts.
Audit Metadata