sales-coaching

Fail

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: CRITICALINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and process untrusted external data, such as sales call transcripts, CRM notes, and rep communications, creating a potential surface for indirect injection attacks.
  • Ingestion points: External deal data, pipeline metrics, and call recording transcripts processed in SKILL.md and through deal-review templates.
  • Boundary markers: The instructions do not define explicit delimiters or instructions to ignore embedded commands within the analyzed sales data.
  • Capability inventory: The skill includes a Python validation script (scripts/check-output.py) and references to external GTM leadership tools.
  • Sanitization: There are no explicit sanitization, validation, or filtering steps defined for external content ingested during the coaching process.
  • [EXTERNAL_DOWNLOADS]: The skill includes numerous references and hyperlinks to external websites, social media profiles, and documentation for sales coaching experts and frameworks.
  • Evidence: Files such as references/experts.md and references/coaching-experts.md contain links to domains like keithrosen.com, forgetthefunnel.com, and winningbydesign.com. These are industry-standard references associated with the skill's primary purpose.
  • Vendor Resources: The skill references official vendor resources from LeadMagic (e.g., leadmagic.io and related GitHub repositories), which are documented as part of the vendor's own ecosystem.
Recommendations
  • Contains 8 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 9, 2026, 06:24 PM