sales-prospecting

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the orth CLI tool to execute API requests for company searches, lead identification, and email verification.
  • [SAFE]: No malicious patterns, such as credential theft, obfuscation, or unauthorized data exfiltration, were detected. The use of the orth tool is consistent with the vendor's own resource patterns.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided search criteria that are interpolated into CLI command arguments.
  • Ingestion points: User-defined search queries and parameters are used in the --body and --query flags of the orth commands in SKILL.md.
  • Boundary markers: None present to delimit user input from the command structure.
  • Capability inventory: The skill is capable of executing shell commands via the orth CLI and making network requests to lead generation APIs.
  • Sanitization: No explicit sanitization or validation of input data is documented within the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 05:57 PM