qualify-accounts
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to install the official
@coldiq/mcppackage from the public registry to enable account enrichment and signal detection capabilities. - [COMMAND_EXECUTION]: Provides instructions for initializing the ColdIQ MCP using
npx, which is a standard procedure for setting up the necessary environment for the skill's primary vendor tools. - [INDIRECT_PROMPT_INJECTION]: The skill ingests company data and intent signals from external sources (ColdIQ API, G2, Bombora) to perform scoring.
- Ingestion points: Data enters via
mcp__coldiq__enrich_companyandmcp__coldiq__find_signalstools. - Boundary markers: Not explicitly defined in the high-level instructions.
- Capability inventory: File system access and network operations are restricted to the context of the provided MCP tools and API calls.
- Sanitization: Standard API responses are processed for firmographic and intent data.
Audit Metadata