account-expansion-mapper

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill retrieves account engagement statistics, contact details, and CRM data from the Amplemarket MCP server. This data is used to differentiate between existing relationships and new outreach targets, which is consistent with the skill's purpose.
  • [EXTERNAL_DOWNLOADS]: Utilizes web search functionality to find publicly available information such as company organizational charts and leadership changes to supplement Amplemarket data.
  • [COMMAND_EXECUTION]: All operations are performed via structured MCP tool calls and search queries; no direct shell command execution or privilege escalation patterns were identified.
  • [PROMPT_INJECTION]: The instructions provide a clear operational framework without attempting to override system safety protocols or extract the agent's base instructions.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources (WebSearch and Amplemarket contact profiles) to populate personalized outreach templates.
  • Ingestion points: Web search results and enriched contact data from Amplemarket tools.
  • Boundary markers: No explicit delimiters are used to wrap external content in the generated outreach fields.
  • Capability inventory: The agent can create and update lead lists using the Amplemarket API.
  • Sanitization: No explicit content filtering or validation is described for the data retrieved from external searches.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 11:36 PM
Security Audit — agent-trust-hub — account-expansion-mapper