prospeo-search-api
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents integration with the Prospeo API located at
api.prospeo.io, which is a well-known service for professional data enrichment. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted data from an external API.
- Ingestion points: Data describing individuals and companies (such as names, job titles, and job histories) is ingested from the Prospeo API into the agent's operating context, as defined in
SKILL.md. - Boundary markers: No specific delimiters or "ignore instructions" wrappers are provided in the reference code to isolate the API-returned text from agent logic.
- Capability inventory: The skill itself provides only documentation and utility snippets for rate-limiting; it does not contain or request any dangerous capabilities like file writing, command execution, or network exfiltration.
- Sanitization: No data sanitization or input validation logic is included in the provided TypeScript reference snippets.
Audit Metadata