linkedin-outreach
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill processes and exports lead data, including names, job titles, and LinkedIn profile URLs, into CSV files stored in the output directory. Handling of this PII is central to the skill's function.
- [CREDENTIALS_UNSAFE]: The skill requires a Supabase Service Role Key for database operations. The instructions correctly advise storing this sensitive credential in a .env file, adhering to security best practices.
- [COMMAND_EXECUTION]: The documentation references a setup script, python3 tools/supabase/setup_database.py, which is intended for initial database configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection via lead signal data. Ingestion points: Signal data such as comment snippets from LinkedIn. Boundary markers: None identified. Capability inventory: Database, local file, and Google Sheets writes. Sanitization: No explicit sanitization of the signal data is described.
Audit Metadata