apollo-cost-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes lead data from external sources (e.g., the
peoplearray in theenrichHighValueLeadsfunction), which represents an attack surface for indirect prompt injection. - Ingestion points: Lead data objects passed to functions in
SKILL.mdandreferences/implementation-guide.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded content are used when processing lead fields like names, titles, or domains.
- Capability inventory: The skill uses
axiosto make network requests to the Apollo API based on the processed data. - Sanitization: No sanitization or validation of the input lead data is performed before it is used in logic or API calls.
Audit Metadata