prospect-research
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves ingesting data from untrusted external sources such as social media profiles, personal websites, and news articles, which could theoretically contain instructions designed to manipulate the agent's output.
- Ingestion points: External content is fetched from LinkedIn, company pages, and news sites via Exa, Apify, and Perplexity.
- Boundary markers: No specific delimiters or instructions to ignore embedded content are defined in the research process.
- Capability inventory: The skill uses information retrieval tools (Exa, Apify, Hunter.io, Perplexity).
- Sanitization: No explicit sanitization or filtering of the retrieved data is mentioned.
- [EXTERNAL_DOWNLOADS]: The skill uses established third-party services (Exa, Apify, Hunter.io, Perplexity) for legitimate data retrieval. These integrations are consistent with the skill's purpose and utilize standard API configurations.
Audit Metadata