helix-mcp-revenue-enablement
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to a remote MCP server at https://revenue-enablement.gtmhelix.com/mcp and references the npm package @shashwatgtmalpha/revenue-enablement-mcp. Both resources are vendor-owned and are necessary for the tool's B2B strategy functions.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources and user inputs. -- Ingestion points: The skill utilizes web_fetch (as referenced in references/operating-principles.md) to retrieve external web content and processes user-supplied deal metrics. -- Boundary markers: It employs explicit 'Assumption:' prefixes and '[User to add: ...]' placeholders to separate interpreted data from instructions. -- Capability inventory: The skill provides access to 12 MCP-hosted sales and strategy tools. -- Sanitization: The instructions mandate a strict fact-checking protocol using a tiered source hierarchy (Tiers 1-3) to verify information before output generation.
Audit Metadata