eligibility-gate
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill follows security best practices by externalizing decision logic into a deterministic script.- [PROMPT_INJECTION]: The skill processes lead data from an external CRM (Twenty), creating a surface for indirect prompt injection. \n
- Ingestion points: Fetches candidate batches from Twenty as described in SKILL.md and references/twenty-filter-strategy.md. \n
- Boundary markers: The skill explicitly delegates decision logic to a deterministic Python script (demo/eligibility_gate.py), preventing the LLM from interpreting lead data as instructions. \n
- Capability inventory: The skill itself is read-only, but its verdicts drive downstream actions like Clay enrichment and campaign sourcing performed by callers. \n
- Sanitization: Lead data is mapped to structured dataclasses, providing inherent structural validation rather than natural language interpretation.- [COMMAND_EXECUTION]: Instructions in SKILL.md direct the agent to execute a local demo script (python3 demo/run_demo.py). The script is provided within the skill, does not perform network or filesystem operations, and is limited to safe, deterministic calculations on synthetic data.
Audit Metadata