inboundfy-copy-posicionamento
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a guide for structured content management. It lacks executable code, network operations, or sensitive data access commands.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data (external descriptions and URLs) to update local project files. Evidence chain: 1. Ingestion points: User-supplied descriptions and URLs. 2. Boundary markers: References to shared validation protocols in the shared directory. 3. Capability inventory: Updating local markdown files; no shell, network, or dynamic execution tools detected. 4. Sanitization: Instructions include validating terms against a dictionary and a specific list of prohibitions.
Audit Metadata