accounting-firm-leads
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a command to add an MCP (Model Context Protocol) server from
https://mcp.manypi.com/mcp. This installs a tool from the author's infrastructure to provide the lead generation capabilities described. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from various external sources, creating a potential surface for indirect prompt injection.
- Ingestion points: The skill reads data from professional body member directories, cloud accounting partner directories, practice software app marketplaces, and accounting firm websites (team pages, blog bylines).
- Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are provided for the data being processed.
- Capability inventory: The skill uses a custom tool (ManyPI MCP server) to retrieve and process firm data, which may involve network operations and file analysis.
- Sanitization: The skill does not describe explicit sanitization, validation, or filtering of the external content before it is processed by the agent.
Audit Metadata