pp-contact-goat
Warn
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of a CLI tool and MCP server via npx and Go binaries from GitHub. It also references a third-party subprocess (stickerdaniel/linkedin-mcp-server) for core LinkedIn functionality.
- [DATA_EXFILTRATION]: The skill accesses sensitive local configuration files, specifically ~/.local/deepline//.env, to resolve API keys. It also utilizes Chrome browser session cookies for Happenstance authentication, which involves reading local browser state.
- [REMOTE_CODE_EXECUTION]: The installation instructions utilize npx -y and go install @latest to fetch and execute code from remote repositories and package registries.
- [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface where untrusted user input is interpolated into shell commands. * Ingestion points: User-provided query, target, and company parameters in SKILL.md. * Boundary markers: Absent. * Capability inventory: Executes the contact-goat-pp-cli binary via the Read Bash tool. * Sanitization: No explicit input validation or sanitization is provided for the interpolated arguments.
- [COMMAND_EXECUTION]: The skill leverages the Read Bash tool to execute the contact-goat-pp-cli binary with arguments derived from user queries.
Audit Metadata