prospecting
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill references a local CLI tool (
node tools/clis/github-prospects.js) used for extracting and enriching data from GitHub stargazers and forks. This is a functional component of the prospecting workflow for developer-focused SaaS.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources including Google Maps, Yelp, and individual business websites (via Firecrawl and Browserbase). It mitigates risks by providing structured qualification phases, requiring source verification, and implementing a multi-step scoring process before finalizing leads.\n- [DATA_EXPOSURE_&_EXFILTRATION]: The skill integrates with various third-party B2B data providers (Apollo, ZoomInfo, Clay, Clearbit). These integrations are documented as standard tools for the skill's primary purpose, with instructions focusing on legitimate business use cases and compliance with data privacy regulations.\n- [SAFE]: The skill contains extensive documentation on compliance (GDPR, CAN-SPAM, CASL) and platform Terms of Service (LinkedIn, Google Maps), explicitly instructing the agent to avoid bulk scraping, bot-like behavior, and bypassing security controls like CAPTCHAs.
Audit Metadata