competitor-signals
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources such as G2 reviews, Capterra reviews, and LinkedIn profiles.
- Ingestion points: Data is ingested through tools like
mcp__coldiq__find_signalsor via scraping platforms like Clay and Phantombuster as described in the fallback plays inSKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are specified for the processed reviews or profile data.
- Capability inventory: The skill uses
mcp__coldiq__*tools for signal finding, person search, and enrichment, and provides templates for automated outreach. - Sanitization: The instructions do not include steps to sanitize or validate the content retrieved from external review sites or social media profiles before interpolation into messages or further processing.
- [DYNAMIC_EXECUTION]: The skill instructs users to install and run the vendor's tool using a package runner.
- Evidence: The instruction
npx -y @coldiq/mcp@latestinSKILL.mddynamically downloads and executes the latest version of the package from the NPM registry. - [EXTERNAL_DOWNLOADS]: The skill communicates with external vendor infrastructure and public package registries.
- Evidence: It utilizes the API at
api.cold-iq.comand directs users to download the@coldiq/mcppackage from the NPM registry.
Audit Metadata