inboundfy-growth-email-frio
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill features a surface for indirect prompt injection as it ingests data from external 'acervo' files and user-defined input fields to generate content.
- Ingestion points: The skill reads data from the 'acervo' directory and various project context files located in the .inboundfy folder.
- Boundary markers: Instructions mandate a preflight check to confirm intent, audience, and result requirements before generating any artifacts.
- Capability inventory: The skill is permitted to read local configuration files and write email prospecting sequences to the local filesystem.
- Sanitization: The workflow requires the use of external validation skills, such as inboundfy-anti-slop and inboundfy-copy-edicao, to sanitize and review generated copy.
- [SAFE]: Analysis of the skill instructions and referenced templates reveals no evidence of malicious patterns, such as command injection, obfuscated URLs, or privilege escalation.
Audit Metadata