recoup-internal-consulting-lead-context
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content from LinkedIn posts, user comments, and company websites to generate outreach dossiers. If this external content contains malicious instructions, it could influence downstream drafting skills.
- Ingestion points: Fetches content from LinkedIn posts and comments (
integrations/linkedin/published/), company websites via firmographic tools (Apify, GetLeads), and external search results. - Boundary markers: The instructions do not define clear delimiters or include "ignore embedded instructions" warnings when processing the retrieved external content.
- Capability inventory: The skill performs file system reads (
pipeline/,clients/), Gmail thread retrieval (search_threads,get_thread), CRM access (Attio), and external network requests for enrichment. - Sanitization: There are no instructions for sanitizing, escaping, or validating the external content before it is interpolated into the dossier passed to subsequent skills.
Audit Metadata