deal-desk
Fail
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes links to external domains in the 'references/experts.md' file that are flagged as malicious by automated security scanners. Evidence: 'KeithRosen.com' is flagged for tech support scam patterns ('FakeT'). Evidence: 'forgetthefunnel.com' is blacklisted. These links are presented as authoritative foundations for the skill's methodology, increasing the risk to users who may interact with the referenced content.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external deal and prospect data, creating a surface for indirect prompt injection. * Ingestion points: Prospect profiles, budget ranges, and competitor pricing are ingested in 'SKILL.md' and related templates. * Boundary markers: Absent. The skill lacks delimiters to isolate user-provided data within its templates. * Capability inventory: The skill includes a Python validation script ('scripts/check-output.py') that performs local file reads; no network or write capabilities were identified in the included scripts. * Sanitization: Absent. There is no evidence of filtering or escaping for external content entering the agent's context.
Recommendations
- AI detected serious security threats
- Contains 8 malicious URL(s) - DO NOT USE
Audit Metadata