build-smart-lists
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined configuration values (e.g., engagement window lengths, property names) that are interpolated into dynamic list definitions.
- Ingestion points: User-provided requirements gathered via the 'Interview' section and manually updated in
scripts/execute.py. - Boundary markers: No specific delimiters or safety instructions are defined for the interpolated values.
- Capability inventory: The skill uses
requeststo perform network operations (POSTto HubSpot API) and writes audit logs to the local file system. - Sanitization: No explicit sanitization or validation is applied to the configuration variables within the script.
- [COMMAND_EXECUTION]: The skill requires the execution of a Python script (
scripts/execute.py) via theuvpackage manager to perform CRM operations. - [EXTERNAL_DOWNLOADS]: The skill interacts with HubSpot's official API at
api.hubapi.com, which is a well-known service.
Audit Metadata