inboundfy-validador-blog
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input in the form of blog articles, briefs, and source materials. This content could contain malicious instructions designed to bypass validation rules or influence the agent's report generation.
- Ingestion points: Blog articles, briefs, and materials-fonte (specified in SKILL.md).
- Boundary markers: The instructions do not specify any delimiters or safety markers to isolate processed data from the system prompt.
- Capability inventory: Invocation of local validation tools like
inboundfy-base-validadorandinboundfy-base-seo, and file reading within the project directory. - Sanitization: There is no mention of sanitizing or filtering external content before processing.
- [COMMAND_EXECUTION]: The skill requires the use of
inboundfy-setupto prepare the project environment. This is a vendor-specific tool related to the 'promovaweb' ecosystem and is part of the intended workflow.
Audit Metadata