inboundfy-metricas
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill workflow involves processing external marketing data and project configuration files, which presents a potential surface for indirect prompt injection.
- Ingestion points: Data enters the agent context through inputs such as campaign objectives, offers, journey stages, and external project files like .inboundfy/context/empresa.md and content catalogues (SKILL.md, REFERENCIA.md).
- Boundary markers: The provided instructions do not define specific delimiters or warnings to separate untrusted external data from the agent's internal processing logic.
- Capability inventory: The skill outlines operations for data transformation, registering origins, and executing handoffs between skills (SKILL.md).
- Sanitization: There is no explicit requirement for sanitizing, escaping, or validating the content retrieved from external sources before it is processed by the agent.
- [NO_CODE]: The skill consists entirely of markdown-based instructions and YAML configuration files. No executable scripts (Python, JavaScript, Shell) or binary files are provided within the skill package.
Audit Metadata