inboundfy-validador-blog-imagem
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data sources such as articles, briefs, and image metadata which are potentially attacker-controlled. Malicious instructions embedded in these inputs could attempt to influence the agent's behavior.
- Ingestion points: The skill reads several inputs defined in
SKILL.mdandREFERENCIA.md, including articles, briefs, and license documentation. - Boundary markers: There are no explicit instructions or structural delimiters (such as XML tags or specific markdown blocks) defined to separate untrusted content from the agent's core instructions.
- Capability inventory: The skill has access to the local file system (reading context files and writing reports) and can invoke other skills or tools in the ecosystem (
inboundfy-base-validador). - Sanitization: No evidence of sanitization, filtering, or validation of the textual content within processed articles or briefs was found in the provided instructions.
Audit Metadata