inboundfy-contexto-operacao

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources such as user-provided URLs and text to update local project context files.
  • Ingestion points: User-provided URLs and text inputs for the 'fonte' and 'Registro' fields in the operational templates.
  • Boundary markers: Absent; the skill does not define specific delimiters to isolate untrusted data within the generated markdown files.
  • Capability inventory: The skill is capable of modifying files within the .inboundfy/context/ directory.
  • Sanitization: The instructions rely on validation checklists rather than programmatic escaping or content filtering to handle external data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 12:47 AM