recruitment-agency-leads
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the installation of a Model Context Protocol (MCP) server using the command:
claude mcp add --transport http manypi https://mcp.manypi.com/mcp -s user. This persists a remote tool in the agent's environment. - [EXTERNAL_DOWNLOADS]: The skill fetches tool configuration and execution logic from the vendor-controlled domain
mcp.manypi.comduring the MCP installation process. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted sources which could contain malicious instructions.
- Ingestion points: Public job boards, recruitment aggregators, member directories, and company filings (SKILL.md).
- Boundary markers: None present; the instructions do not specify delimiters or safety warnings for the ingested data.
- Capability inventory: The agent uses the
manypitool and potentially browser-based search capabilities to retrieve and process external records. - Sanitization: There are no instructions for sanitizing or validating the content retrieved from external job postings or directories.
Audit Metadata