champion-tracker
Warn
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The script
champion_tracker.pydynamically loads an external Python module (enrich_leads.py) from a relative path in another skill's directory (lead-qualification/scripts/) usingimportlib.util. This is used for cross-skill code reuse but involves runtime execution of code from computed paths. - [EXTERNAL_DOWNLOADS]: The skill uses the
requestslibrary to communicate withapp.gooseworks.ai(the author's official domain) to proxy enrichment requests to Apify. This is a documented core feature for processing LinkedIn profiles. - [COMMAND_EXECUTION]: The Python script performs file system operations, including searching for and reading
.envfiles in parent directories and writing results to thesnapshots/andoutput/folders. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface through the ingestion of external data.
- Ingestion points: Processes data from
champions.csvand external profile enrichment data. - Boundary markers: None present; the script treats CSV content as trusted data for scoring and reporting.
- Capability inventory: Network access via
requestsand file-writing capabilities across multiple directories. - Sanitization: No sanitization is performed on input data beyond normalization of URLs and company names.
Audit Metadata