outbound-engine
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external prospect data to generate personalized email sequences and a local HTML QA tool, creating an injection surface.
- Ingestion points: Enriched prospect lists in
*-leads.csvformat are ingested from theprospect-scraperskill or other external sources, as described inSKILL.md. - Boundary markers: The skill uses
{{token}}interpolation and spintax{a|b|c}to separate user-provided data from instruction templates. - Capability inventory: The skill generates self-contained HTML files (
* Email Preview.html) for review and interacts with the Smartlead API to send outbound communications. - Sanitization: While the documentation in
SKILL.mdandreferences/preview-tool-standard.mdmentions highlighting missing data, it does not explicitly specify HTML escaping or sanitization for rendering untrusted prospect data in the generated preview tool. - [COMMAND_EXECUTION]: The skill instructions require the agent to execute specific command-line utilities to perform infrastructure checks and data management.
- DNS Verification:
SKILL.mdinstructs the agent to use thedigutility to verify SPF, DKIM, DMARC, and MX records for sending domains. - API Interaction: The instructions suggest using a
Smartlead CLIor API wrapper to perform bulk operations on lead data.
Audit Metadata