trigger-event-outreach-messaging
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install an MCP server from the vendor's domain (mcp.manypi.com). This tool is used to retrieve the trigger event data that the skill helps process.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external information such as news, funding reports, and job postings, which constitutes an indirect prompt injection surface.
- Ingestion points: External trigger event signals (e.g., funding news, hiring updates, technology changes) referenced in SKILL.md.
- Boundary markers: Absent; the instructions provide natural language templates without explicit delimiters for external data.
- Capability inventory: The skill instructions are limited to text generation and do not include file system writes, network exfiltration, or command execution. It suggests adding the ManyPI MCP tool for data retrieval.
- Sanitization: No sanitization or verification steps for the external data are specified.
Audit Metadata