inboundfy-base-editorial

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a standard data processing workflow within a restricted local environment. It focuses on transforming input text into structured editorial artifacts.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external files such as bruto.md and faq.md.
  • Ingestion points: Local project files and context files located in the .inboundfy/ directory.
  • Boundary markers: None explicitly defined for untrusted input content.
  • Capability inventory: The skill writes output to base-editorial.md and audit logs; it also invokes internal platform tools (inboundfy-setup, inboundfy-anti-slop) for configuration and quality control.
  • Sanitization: No explicit sanitization or filtering of input data is described in the instructions.
  • [COMMAND_EXECUTION]: The skill references the use of inboundfy-setup and inboundfy-anti-slop. These appear to be domain-specific utility tools provided by the platform or vendor to maintain consistency and audit quality, and do not represent arbitrary shell execution or remote code loading.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 12:47 AM