inboundfy-base-seo
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from user-provided themes/briefs and project-specific context files.\n
- Ingestion points: User briefs or themes provided as input, and local context files such as
context/publico.md,context/produtos.md,context/servicos.md, andcontext/ferramentas.md.\n - Boundary markers: The instructions do not specify any delimiters or safety warnings to prevent the agent from interpreting instructions potentially embedded within the input data.\n
- Capability inventory: The skill's functionality is limited to generating SEO metadata. It does not perform sensitive operations like writing to the file system, making network requests, or executing shell commands.\n
- Sanitization: There is no evidence of sanitization, filtering, or validation of the external content before it is processed by the agent.
Audit Metadata