inboundfy-copy-gramatica
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill does not contain any evidence of credential theft, data exfiltration, or malicious command execution. Its operations are strictly focused on text auditing and linguistic correction.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it is designed to process untrusted text drafts provided by users or other agents.
- Ingestion points: The skill receives Markdown or plain text inputs for auditing as defined in the 'Entrada esperada' section of
SKILL.md. - Boundary markers: The instructions lack explicit delimiters (such as XML tags or unique markers) to isolate input text from the agent's instructions, though the audit logic is highly specific.
- Capability inventory: The skill is restricted to text analysis and reporting; it does not have the capability to write files, perform network requests, or execute shell commands.
- Sanitization: There is no evidence of input filtering or sanitization to prevent the agent from potentially following instructions embedded within the text intended for auditing.
Audit Metadata