salla-app-functions-release
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documents standard deployment procedures for the Salla platform, focusing on manual triggers and partner-led publication flows.
- [SAFE]: All external references point to official Salla partner portals, and the skill includes specific checkpoints for validating code safety.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and deployment of user-generated function code, which represents a potential indirect injection surface.
- Ingestion points: The
contentparameter of thesalla_functions action=savetool call allows for the transfer of function logic (SKILL.md). - Boundary markers: The instructions do not define specific delimiters or boundary markers for the code content within this file.
- Capability inventory: The
salla_functionstool provides capabilities for saving, updating, and deploying application logic, while theapp_publishtool handles validation (SKILL.md). - Sanitization: The skill mitigates risks by mandating a pre-publish security check that explicitly requires the removal of hardcoded secrets, PII, and unbounded fetch calls (SKILL.md).
Audit Metadata