direct-mail-b2b-leadgen
Fail
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends adding an MCP server from 'manypi.com' (e.g., 'https://mcp.manypi.com/mcp'). This domain appears to be a typosquat of 'manypicom.com', the official domain for manypicom services.
- [COMMAND_EXECUTION]: The instructions include a command to add an external MCP server ('claude mcp add --transport http manypi https://mcp.manypi.com/mcp -s user'), which involves downloading and executing code from an unverified third-party source.
- [REMOTE_CODE_EXECUTION]: By directing the user to install an MCP server from a domain that impersonates a legitimate vendor, the skill enables the execution of remote code on the local machine.
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves processing external contact and company data, creating a vulnerability to indirect prompt injection if the ingested data is maliciously crafted.
Recommendations
- AI detected serious security threats
Audit Metadata