prospecting
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external websites and social platforms (e.g., Reddit, Hacker News, GitHub, and forum threads) using tools like Firecrawl and Browserbase to identify demand signals.
- Ingestion points: External URLs and social media threads read via research tools as described in
references/demand-signals.md. - Boundary markers: The skill includes extensive compliance guidelines and instructions to paraphrase content and verify signals across multiple independent sources to ensure reliability.
- Capability inventory: The skill possesses network operation capabilities via B2B tool integrations (Apollo, Clay, Truelist) and the ability to generate lead lists in CSV format.
- Sanitization: Instructions are present to "paraphrase by default" and "quote minimally" when processing external signals to mitigate direct injection risks.
- [COMMAND_EXECUTION]: The skill references the execution of a specific local CLI tool (
node tools/clis/github-prospects.js) for data enrichment from GitHub stargazers and forks. This is a targeted command for included tooling rather than arbitrary code execution. - [EXTERNAL_DOWNLOADS]: The skill references and integrates with multiple well-known B2B data services and APIs, including Apollo, ZoomInfo, Clay, Clearbit, and Truelist. These are recognized industry services used for the skill's primary purpose of lead generation.
Audit Metadata