lead-enrich
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run Bash commands using the
composioCLI. User input from$ARGUMENTSis embedded into these shell commands (e.g., inside the data payload forcomposio execute), which can lead to command injection if the input contains shell metacharacters like semicolons or backticks. - [PROMPT_INJECTION]: This skill exhibits an indirect prompt injection surface by processing untrusted user data without validation or delimiters.
- Ingestion points: User input enters via the
$ARGUMENTSvariable inSKILL.md. - Boundary markers: Absent. The input is placed directly into command-line arguments.
- Capability inventory: The skill uses the
Bashtool to perform searches and tool executions. - Sanitization: No sanitization or escaping logic is present to handle malicious input before it reaches the command line.
Audit Metadata