outreach
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection by retrieving and processing untrusted data from the web and social media profiles.
- Ingestion points: External research functions defined in
SKILL.md(ICP trend analysis) andcall-prep.md(LinkedIn profile activity and company news research). - Boundary markers: There are no explicit delimiters or "ignore instructions" warnings defined to prevent the agent from obeying malicious commands that might be embedded in a prospect's public profile or recent news articles.
- Capability inventory: The skill is capable of writing files to the
.sales/directory and performing automated web research. - Sanitization: The instructions do not include steps to sanitize or filter the content retrieved from external sources before it is interpolated into outreach templates.
Audit Metadata