inboundfy-validador-linkedin-imagem
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill identifies as a validator for visual assets. It relies on local configuration files (e.g.,
.inboundfy/framework/VERSAO.md) and internal framework skills (inboundfy-base-validador). - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data including user-provided images, text, and briefs for validation. While this presents an ingestion surface, the skill lacks dangerous sinks such as arbitrary command execution, dynamic code evaluation, or outbound network operations, effectively mitigating the risk of indirect injection exploitation.
- [COMMAND_EXECUTION]: There is no evidence of direct shell command execution or unsafe subprocess spawning. Mentions of tools like
inboundfy-setupare presented as instructional recommendations for the user rather than automated execution patterns.
Audit Metadata