care-home-leads
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides an installation command
claude mcp add --transport http manypi https://mcp.manypi.com/mcp -s userto integrate an MCP server from manypi.com. This allows the agent to utilize external lead-enrichment tools provided by the vendor. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to scrape and analyze content from care home websites, regulator registers, and inspection reports. Because the agent processes this untrusted external data, there is a risk that malicious actors could embed hidden instructions in those sources to manipulate the agent's output or actions during the lead generation process.
Audit Metadata