prospecting
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust compliance framework, explicitly forbidding bulk scraping of major platforms (LinkedIn, Google Maps) and requiring the capture of source URLs and collection dates for audit purposes.
- [COMMAND_EXECUTION]: The skill references the use of local CLI tools, such as a GitHub prospecting script, to automate data enrichment. These operations are within the expected scope of a lead generation tool and do not exhibit malicious intent.
- [DATA_EXFILTRATION]: Network operations are confined to legitimate B2B data providers (e.g., Apollo, ZoomInfo, Clay, Truelist) via their respective APIs or MCP servers. No unauthorized data harvesting or transfer to suspicious domains was detected.
- [PROMPT_INJECTION]: Instructions include defensive measures against indirect prompt injection, such as advising the agent to paraphrase content and quote external sources minimally when performing demand-signal discovery from public forums.
- [EXTERNAL_DOWNLOADS]: Dependencies and integrations target well-known and reputable technology services. The skill provides clear guidance on using these tools within their professional terms of service.
Audit Metadata