lead-enricher-free
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data from company websites, LinkedIn profiles, and search results to build lead profiles, creating a surface for indirect prompt injection.
- Ingestion points: External company URLs, LinkedIn company pages, and search results referenced in SKILL.md.
- Boundary markers: The instructions do not specify boundary markers or include directives for the agent to ignore instructions embedded within the fetched data.
- Capability inventory: The skill identifies company information, tech stacks, and decision-makers using search tools and provided APIs (Clearbit, Hunter, BuiltWith), but lacks file system write access or arbitrary command execution capabilities.
- Sanitization: The instructions do not mention any sanitization, filtering, or escaping of the external content.
Audit Metadata