whatsapp-outreach
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script uses the Playwright library to automate a browser instance for interacting with WhatsApp Web. This is the core functionality for outreach and is implemented using standard automation practices. \n- [DATA_EXFILTRATION]: Network activity is restricted to the official WhatsApp domain (web.whatsapp.com) and the database server defined in the environment. There is no evidence of data being sent to unauthorized third-party services. \n- [CREDENTIALS_UNSAFE]: Sensitive information, specifically the database connection string, is accessed through environment variables rather than being hardcoded in the source files, following standard security protocols. \n- [PROMPT_INJECTION]: The skill ingests business lead data from a database and incorporates it into message templates. This represents an indirect data ingestion surface, but it is used solely for message content and does not impact the agent's internal control instructions. \n
- Ingestion points: The business_leads and whatsapp_outreach tables via SQL queries in scripts/whatsapp-outreach.js and scripts/whatsapp-phone-normalize.js. \n
- Boundary markers: Data is used as parameters in string templates for messaging; no explicit boundary markers are used as the content is not fed back to an LLM as instructions. \n
- Capability inventory: Database access (read/write) and automated browser control. \n
- Sanitization: Phone numbers are validated and normalized; business names are inserted directly into templates.
Audit Metadata