sales-prospecting
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain adversarial instructions.
- Ingestion points: Data is ingested via
web_search_live(search engine results),web_enrich_live(external website content), andsocial_post_search_live(social media posts) as described inSKILL.mdrecipes. - Boundary markers: The instructions do not specify explicit delimiters or 'ignore' instructions for the content fetched from the web or social media.
- Capability inventory: The skill has the capability to execute JavaScript via the
executetool, perform further network searches, and access contact enrichment tools. - Sanitization: The skill implements basic junk filtering by excluding profiles with low connection counts or specific titles (e.g., 'advisor', 'investor') as outlined in the
champion trackerandperson_searchrecipes. - [DYNAMIC_EXECUTION]: The skill instructs the agent to generate and run JavaScript code to interact with tools.
- Evidence: The
SKILL.mdfile defines that 'All Crustdata data tools run inside execute({ code }) — a plain-JavaScript script'. It provides specific JS templates for the agent to follow when performing company and person searches. - [EXTERNAL_DOWNLOADS]: The skill fetches resources from remote vendor-owned URLs.
- Evidence: The skill fetches company logos and person profile pictures from
basic_info.logo_permalinkandbasic_profile.profile_picture_permalink. It also references the vendor's MCP server athttps://install.crustdata.com/mcpfor tool execution.
Audit Metadata