sales-enrich

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Retrieves platform-specific skill documentation from the vendor's GitHub repository to provide tailored advice for specific tools.
  • [SAFE]: No malicious patterns, such as credential exfiltration, suspicious command execution, or obfuscation, were identified. The skill's operations are consistent with its stated purpose of managing sales data workflows.
  • [PROMPT_INJECTION]: The skill implements a self-improvement loop using a local reference file. 1. Ingestion points: 'references/learnings.md' is read at the beginning of sessions. 2. Boundary markers: No explicit markers are used to delimit user-contributed findings. 3. Capability inventory: The skill instructions include reading local markdown files and fetching remote content via 'WebFetch'. 4. Sanitization: Appended data is not sanitized, creating a surface for potential indirect prompt injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 02:37 AM