codigo-automacao

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious code, prompt injections, or obfuscation were detected. The skill is purely instructional and provides high-quality templates for software development.
  • [EXTERNAL_DOWNLOADS]: The skill provides links to external documentation and tutorials from well-known technology blogs and official service providers to assist with automation and prompt engineering.
  • [INDIRECT_PROMPT_INJECTION]: The skill documents how to handle untrusted external data from webhooks and automation triggers, which is a potential injection surface. The instructions effectively mitigate this risk by requiring strict validation and authentication protocols.
  • Ingestion points: External webhook payloads (integrador-de-webhooks/SKILL.md) and data from no-code platform triggers (no-code-automacao/SKILL.md).
  • Boundary markers: The skill recommends using structured data (JSON/OpenAPI) which provides inherent structural boundaries, although explicit prompt delimiters are not shown in the snippets.
  • Capability inventory: The skill leverages the agent's full development toolset, including file writing and command execution.
  • Sanitization: The skill mandates the use of HMAC-SHA256 signature verification for webhooks, parameterized queries for databases, and general input validation according to OWASP Top 10 standards.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 12:14 PM