prospecting
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local utility script (
node tools/clis/github-prospects.js) to automate the retrieval and enrichment of developer-intent signals (stargazers and forks) from GitHub repositories. - [EXTERNAL_DOWNLOADS]: Fetches business, technographic, and contact information from established and well-known services such as Apollo, ZoomInfo, LinkedIn, Crunchbase, and GitHub. These operations are conducted neutrally as part of the intended prospecting functionality.
- [PROMPT_INJECTION]: The demand-signal discovery process involves ingesting untrusted data from public forums, social media threads, and community posts (e.g., Reddit, Hacker News, GitHub issues). This creates a surface for indirect prompt injection. The skill mitigates this risk through instructions that require the agent to paraphrase content, provide a cited evidence ledger, and use specific boundary labels for potential customers rather than treating ingested data as authoritative commands.
Audit Metadata