sales-account-map
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches additional skill documentation from the author's GitHub repository (raw.githubusercontent.com/sales-skills/) to refine tool recommendations.
- [PROMPT_INJECTION]: The skill ingests data from external GitHub sources and user-provided deal details, which constitutes a surface for indirect prompt injection.
- Ingestion points: Reads from references/learnings.md, user input, and remote SKILL.md files.
- Boundary markers: Lacks specific delimiters or isolation instructions for external data.
- Capability inventory: Performs file operations and network requests (WebFetch).
- Sanitization: External content is used without explicit sanitization or filtering logic.
- [COMMAND_EXECUTION]: Provides instructions for installing related tools via npx, which involves executing remote code as part of standard setup.
Audit Metadata