inboundfy-growth-social

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external data for social media planning, creating a potential surface for indirect prompt injection.
  • Ingestion points: The skill accepts parameters such as objectives, personas, and content IDs from the user as specified in SKILL.md.
  • Boundary markers: Templates in REFERENCIA.md use placeholder syntax (e.g., {{id}}, {{plano}}) to delineate user-supplied data from instructions.
  • Capability inventory: The skill is authorized to read local project configuration and context files (e.g., .inboundfy/context/marca-voz.md) and invoke auxiliary skills like inboundfy-setup and inboundfy-anti-slop.
  • Sanitization: The execution flow incorporates mandatory validation steps using the inboundfy-anti-slop and inboundfy-copy-edicao skills to review and refine content before delivery.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 12:48 AM