sales-prospect-list

SUSPICIOUS. The core prospect-list guidance is benign and aligned, with no obvious credential harvesting or exfiltration. However, the skill expands into remote fetching of other skill instructions and install guidance, including third-party repos, which introduces transitive-trust and prompt-injection risk disproportionate to a list-building helper.