sdr-master-prompts
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
@coldiq/mcppackage from the official npm registry vianpxto enable lead enrichment features. This is a standard installation method for the vendor's own tooling. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external lead data such as person enrichment, intent signals, and social intelligence from the ColdIQ API.
- Ingestion points: Tools like
mcp__coldiq__enrich_personandmcp__coldiq__find_signalsprovide external content from lead data sources. - Boundary markers: The instructions do not define specific delimiters for separating untrusted data from the system prompt.
- Capability inventory: The skill uses the ingested data to generate outbound sales messages for Email, LinkedIn, and WhatsApp.
- Sanitization: No explicit sanitization or filtering of external content is described.
- [COMMAND_EXECUTION]: Provides instructions to execute
npx -y @coldiq/mcp@latestto set up the environment. This is a documented command for initializing the required vendor-provided MCP server.
Audit Metadata