inboundfy-growth-popups
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill provides clear instructions for contextual planning and refers to local configuration files for brand voice and persona. It includes quality checks through secondary skills like 'inboundfy-anti-slop' to ensure output integrity.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data (user objectives and cited public documents), which is an indirect prompt injection surface, it includes several validation steps and quality check calls that mitigate the risk.
- Ingestion points: External document references in .inboundfy/fontes-projeto.md and user-supplied objectives.
- Boundary markers: The skill does not define specific delimiters to isolate external content.
- Capability inventory: Text generation and brief recording within the local workspace.
- Sanitization: Relies on referencing revision skills for output validation.
Audit Metadata