fitness-studio-leads
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a command-line instruction for the user to add an MCP tool using
claude mcp add. This is a documented method for extending the agent's capabilities with specific lead-generation tools. - [EXTERNAL_DOWNLOADS]: The skill references an external resource at
https://mcp.manypi.com/mcpto install functionality. This endpoint belongs to the vendor 'manypicom' and represents legitimate resource usage for this skill. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from external sources such as studio directories, social media profiles, and booking platforms, which represents a potential attack surface.
- Ingestion points: External web content from booking platforms (e.g., Mindbody, Zen Planner), team pages, and Instagram bios.
- Boundary markers: The skill uses a structured JSON brief to define search parameters, which helps constrain the agent's data extraction tasks.
- Capability inventory: The agent uses the
manypitool to perform web-based searches and data extraction. - Sanitization: The instructions focus on extracting specific fields (class counts, membership prices) which naturally filters out unrelated malicious content.
Audit Metadata