sales-prospecting
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
orthCLI tool to execute API requests for company searches, lead identification, and email verification. - [SAFE]: No malicious patterns, such as credential theft, obfuscation, or unauthorized data exfiltration, were detected. The use of the
orthtool is consistent with the vendor's own resource patterns. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided search criteria that are interpolated into CLI command arguments.
- Ingestion points: User-defined search queries and parameters are used in the
--bodyand--queryflags of theorthcommands in SKILL.md. - Boundary markers: None present to delimit user input from the command structure.
- Capability inventory: The skill is capable of executing shell commands via the
orthCLI and making network requests to lead generation APIs. - Sanitization: No explicit sanitization or validation of input data is documented within the skill instructions.
Audit Metadata