automotive-dealer-leads

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of a Model Context Protocol (MCP) server from https://mcp.manypi.com/mcp. This is a vendor-owned resource used to provide the skill's core data-fetching capabilities.
  • [COMMAND_EXECUTION]: Instructs the user to run the claude mcp add command to configure the manypi tool, which is necessary for the lead generation workflow described in the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from various external automotive portals and public registers, creating a potential vector for indirect prompt injection.
  • Ingestion points: Data scraped from classified and marketplace portals, trade body registers, and MOT test station databases as specified in the Brief sections.
  • Boundary markers: Absent. The skill does not contain instructions to the agent to treat external portal data as untrusted or to ignore embedded instructions within that content.
  • Capability inventory: The skill uses a custom MCP tool (manypi) that provides network access and data processing capabilities.
  • Sanitization: No sanitization or filtering logic is specified for the data retrieved from external third-party sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 10:00 PM