champion-tracker

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a standard sales automation workflow using official MCP tools for HubSpot and Amplemarket.
  • [DATA_EXFILTRATION]: The skill reads contact information from HubSpot and transmits identifiers (email, LinkedIn URLs) to Amplemarket for data enrichment. This behavior is the stated primary purpose of the skill and aligns with typical usage for the vendor's platform.
  • [COMMAND_EXECUTION]: The workflow utilizes WebSearch to retrieve public news about companies. This introduces a surface for indirect prompt injection via untrusted web content, but the risk is mitigated as the output is used for text generation rather than driving sensitive system operations.
  • [SAFE]: Best practices are followed regarding resource management, such as prompting the user to process large contact lists in batches to manage enrichment credits.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 11:36 PM
Security Audit — agent-trust-hub — champion-tracker