competitive-displacement-finder-skill

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill integrates with well-known and reputable services including ZoomInfo, Apollo, Semrush, and HubSpot. These network operations are consistent with the stated purpose of sales lead discovery and enrichment.
  • [SAFE]: The skill implements a structured verification framework (Gates A-D) that requires checking competitive claims against an internal product catalog (search_product_catalog) and verifying outbound copy through a brand-specific tool (check_my_copy) before output generation.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from third-party sales intelligence platforms to generate displacement pitches, which presents a surface for potential instruction injection if the source data is compromised.
  • Ingestion points: Competitive stack signals from ZoomInfo, prospect data from Apollo, and intent-based keywords from Semrush (SKILL.md).
  • Boundary markers: The instructions do not specify explicit delimiters or 'ignore' warnings for the data ingested from these external APIs during pitch generation.
  • Capability inventory: The skill uses HubSpot search and lead qualification tools, and performs local file writes to Excel workbooks and a JSON analytics file (SKILL.md).
  • Sanitization: All outbound text strings are passed through the check_my_copy tool for brand and content verification prior to being presented as drafts.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:52 PM