inboundfy-validador-substack
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill focuses on validating Substack content against editorial standards. No malicious code, network exfiltration, or unauthorized file access patterns were found.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content which presents an attack surface for indirect prompt injection. * Ingestion points: Substack piece content and associated README files. * Boundary markers: Uses structured YAML and Markdown for reporting. * Capability inventory: Restricted to reading files and generating reports; no network or shell capabilities. * Sanitization: No specific sanitization of input text is defined.
Audit Metadata