lead-scoring
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted lead data from CSVs or CRM exports, which could contain instructions intended to influence the agent. However, the skill lacks the capabilities (such as network access or shell execution) required for an attacker to exploit this surface.
- Ingestion points: Workflow Step 2 in
SKILL.md. - Boundary markers: Absent.
- Capability inventory: None (only text and table output).
- Sanitization: Absent.
- [NO_CODE]: The skill consists entirely of markdown-based instructions and does not include any executable scripts or binary files.
Audit Metadata