prospecting
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from public forums, GitHub issues, and social media threads to identify demand signals. It explicitly instructs the agent to treat this content as untrusted and to disregard any instructions embedded within the fetched data to mitigate the risk of indirect prompt injection.
- [COMMAND_EXECUTION]: The skill contains instructions for the agent to execute a local Node.js utility script, github-prospects.js, for extracting and processing prospect data from GitHub stargazers and forks.
- [EXTERNAL_DOWNLOADS]: The documentation includes links to external registries and tool guides hosted on GitHub, which are used as informational references for integrating third-party prospecting and verification services.
Audit Metadata