sales-coaching
Fail
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: CRITICALINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and process untrusted external data, such as sales call transcripts, CRM notes, and rep communications, creating a potential surface for indirect injection attacks.
- Ingestion points: External deal data, pipeline metrics, and call recording transcripts processed in SKILL.md and through deal-review templates.
- Boundary markers: The instructions do not define explicit delimiters or instructions to ignore embedded commands within the analyzed sales data.
- Capability inventory: The skill includes a Python validation script (scripts/check-output.py) and references to external GTM leadership tools.
- Sanitization: There are no explicit sanitization, validation, or filtering steps defined for external content ingested during the coaching process.
- [EXTERNAL_DOWNLOADS]: The skill includes numerous references and hyperlinks to external websites, social media profiles, and documentation for sales coaching experts and frameworks.
- Evidence: Files such as references/experts.md and references/coaching-experts.md contain links to domains like keithrosen.com, forgetthefunnel.com, and winningbydesign.com. These are industry-standard references associated with the skill's primary purpose.
- Vendor Resources: The skill references official vendor resources from LeadMagic (e.g., leadmagic.io and related GitHub repositories), which are documented as part of the vendor's own ecosystem.
Recommendations
- Contains 8 malicious URL(s) - DO NOT USE
Audit Metadata