lead-qualification
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill defines a workflow that ingests untrusted data from external sources, creating a potential surface for indirect prompt injection attacks.
- Ingestion points: Data is gathered in Step 1 using WebSearch and WebFetch tools to scrape company websites and public information, alongside user-provided conversation notes.
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious commands embedded within the fetched lead data.
- Capability inventory: The skill is designed to chain output into automated communication tools, specifically referencing the 'linkedin-outreach' and 'cold-email-personalization' skills.
- Sanitization: There are no explicit steps defined for validating or sanitizing the content retrieved from external sources before it is used to influence agent decisions and outreach actions.
Audit Metadata