inboundfy-enablement-vendas
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources and user-provided inputs, creating a surface for indirect prompt injection.\n
- Ingestion points: Untrusted data enters the agent context through "Entrada esperada" (IDs de acervo, persona, canal, oferta) and "Contexto exigido" (documentos públicos citados, fontes-projeto.md) as specified in
SKILL.md.\n - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the processing workflow.\n
- Capability inventory: The skill involves reading local configuration files and writing/updating files to persist sales materials ("Idempotência" in
SKILL.md).\n - Sanitization: No sanitization or validation of external content is specified before the data is used to generate narratives and sales kits.
Audit Metadata