prospecting

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources such as forums, product reviews, and GitHub issues, which creates a surface for indirect prompt injection attacks.
  • Ingestion points: Public discourse threads, community posts, and product reviews mined in the demand-signal branch to identify prospect pain points (referenced in references/demand-signals.md).
  • Boundary markers: The skill contains explicit safety instructions directing the agent to treat fetched content as untrusted data and to never follow instructions embedded within that content (references/demand-signals.md).
  • Capability inventory: The agent possesses the capability to write lead sheets to the file system (CSV/Markdown) and perform network operations via external tool integrations (SKILL.md, references/data-sources.md).
  • Sanitization: Instructions recommend paraphrasing over quoting and specifically require escaping all values when generating HTML-based evidence reports (references/demand-signals.md).
  • [COMMAND_EXECUTION]: The skill documents the use of a vendor-provided CLI tool, github-prospects.js, intended for extracting and enriching data from GitHub stargazers and forks (references/saas-prospecting.md, references/data-sources.md).
  • [EXTERNAL_DOWNLOADS]: The skill integrates with and references numerous third-party B2B data platforms and search services, such as Apollo, Clay, ZoomInfo, and Truelist, typically via MCP servers or official APIs (SKILL.md, references/data-sources.md). These are identified as legitimate tools for prospecting and enrichment purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 02:15 AM