prospecting
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill references the use of a local utility script,
node tools/clis/github-prospects.js, to automate the extraction and enrichment of lead data from GitHub stargazers and forks in the SaaS prospecting branch. - [EXTERNAL_DOWNLOADS]: The skill leverages numerous third-party B2B data providers and enrichment services, including Apollo, ZoomInfo, Clay, Clearbit, and Truelist, for firmographic discovery, contact enrichment, and email deliverability validation.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from public forums (e.g., Reddit, Hacker News), social media, and business websites to identify demand signals and generate outreach drafts, creating a potential surface for indirect prompt injection.
- Ingestion points: Data enters the agent's context through tools such as
last30days,social-fetch, and web scraping services (Firecrawl, Browserbase) as detailed in the demand-signals and local-prospecting references. - Boundary markers: The instructions lack specific requirements for strict delimiters (such as XML tags or unique markers) when interpolating retrieved web content into prompts for generating outreach copy.
- Capability inventory: The skill possesses capabilities for file system writes (CSV generation), web navigation, and local script execution.
- Sanitization: There are no documented procedures for sanitizing or escaping content retrieved from external platforms before processing it for report generation or communication drafting.
Audit Metadata