outbound-nurture-engine
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from multiple sources to automate CRM updates and campaign generation, creating a surface for indirect prompt injection.
- Ingestion points: Lead conversation threads (LinkedIn/Email) retrieved via the La Growth Machine MCP, website content discovered through sitemap crawling, and documents from Notion or Google Drive.
- Boundary markers: Absent. The instructions do not define specific delimiters or "ignore" directives for instructions that might be embedded within lead replies or website content.
- Capability inventory: The skill possesses the ability to execute shell commands (
curl,python3), write to the local/tmp/directory, and perform authenticated writes to the CRM (updating leads and campaigns via MCP). - Sanitization: The engine (
scripts/build.py) performs automated validation of generated sentences and HTML payloads (e.g., regex checks for malformed URLs, length constraints, and variable schema validation) before they are written to the CRM. - [DYNAMIC_EXECUTION]: The helper script uses dynamic module loading to verify file existence.
- Evidence:
scripts/build.pyuses__import__("os")to check for the presence of the library index file during execution. - [COMMAND_EXECUTION]: The skill workflow relies on executing shell commands for network resolution and internal processing logic.
- Evidence:
SKILL.mdinstructs the agent to usecurl -sIto resolve short links and invokespython3 scripts/build.pyfor sitemap discovery, indexing, and matching tasks.
Audit Metadata