Skills
skills/gooseworks-ai/goose-skills/sales-prospecting/Gen Agent Trust Hub

sales-prospecting

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes curl commands to perform API requests and python3 for parsing JSON configuration files.
  • [DATA_EXPOSURE]: The skill accesses its own configuration and credentials stored in ~/.gooseworks/credentials.json to authenticate API calls.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests contact and company data from external prospecting APIs (Fiber, Hunter, Sixtyfour, Brand-dev), which constitutes an untrusted data surface.
  • Ingestion points: Output from API calls to /v1/proxy/orthogonal/run documented in SKILL.md.
  • Boundary markers: Absent; data is processed directly as search results.
  • Capability inventory: Includes network operations (curl) and local file reading (python3).
  • Sanitization: Not explicitly implemented in the provided shell examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 02:14 PM
Security Audit — agent-trust-hub — sales-prospecting