prospecting

Pass

Audited by Gen Agent Trust Hub on Aug 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill references the use of a local utility script, node tools/clis/github-prospects.js, to automate the extraction and enrichment of lead data from GitHub stargazers and forks in the SaaS prospecting branch.
  • [EXTERNAL_DOWNLOADS]: The skill leverages numerous third-party B2B data providers and enrichment services, including Apollo, ZoomInfo, Clay, Clearbit, and Truelist, for firmographic discovery, contact enrichment, and email deliverability validation.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from public forums (e.g., Reddit, Hacker News), social media, and business websites to identify demand signals and generate outreach drafts, creating a potential surface for indirect prompt injection.
  • Ingestion points: Data enters the agent's context through tools such as last30days, social-fetch, and web scraping services (Firecrawl, Browserbase) as detailed in the demand-signals and local-prospecting references.
  • Boundary markers: The instructions lack specific requirements for strict delimiters (such as XML tags or unique markers) when interpolating retrieved web content into prompts for generating outreach copy.
  • Capability inventory: The skill possesses capabilities for file system writes (CSV generation), web navigation, and local script execution.
  • Sanitization: There are no documented procedures for sanitizing or escaping content retrieved from external platforms before processing it for report generation or communication drafting.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 22, 2026, 02:03 PM