inboundfy-validador-changelog
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from project files and user-provided documents, creating a surface for indirect prompt injection where malicious instructions could be embedded in the data being validated.
- Ingestion points: The skill reads external content from
context/, as well as user-provided inputs like "Entrada candidata", "release", and "brief" (SKILL.md). - Boundary markers: There are no instructions or system-level delimiters defined to separate untrusted content from the agent's core instructions.
- Capability inventory: The skill is capable of triggering other processes such as
inboundfy-base-validadorandinboundfy-setup, and handing off reports to theinboundfy-especialista-changelogskill (SKILL.md). - Sanitization: No sanitization, validation, or escaping of the input content is performed before processing.
Audit Metadata