sdr-master-prompts

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the @coldiq/mcp package from the official npm registry via npx to enable lead enrichment features. This is a standard installation method for the vendor's own tooling.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external lead data such as person enrichment, intent signals, and social intelligence from the ColdIQ API.
  • Ingestion points: Tools like mcp__coldiq__enrich_person and mcp__coldiq__find_signals provide external content from lead data sources.
  • Boundary markers: The instructions do not define specific delimiters for separating untrusted data from the system prompt.
  • Capability inventory: The skill uses the ingested data to generate outbound sales messages for Email, LinkedIn, and WhatsApp.
  • Sanitization: No explicit sanitization or filtering of external content is described.
  • [COMMAND_EXECUTION]: Provides instructions to execute npx -y @coldiq/mcp@latest to set up the environment. This is a documented command for initializing the required vendor-provided MCP server.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 05:22 AM
Security Audit — agent-trust-hub — sdr-master-prompts