prospecting

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external websites and social platforms (e.g., Reddit, Hacker News, GitHub, and forum threads) using tools like Firecrawl and Browserbase to identify demand signals.
  • Ingestion points: External URLs and social media threads read via research tools as described in references/demand-signals.md.
  • Boundary markers: The skill includes extensive compliance guidelines and instructions to paraphrase content and verify signals across multiple independent sources to ensure reliability.
  • Capability inventory: The skill possesses network operation capabilities via B2B tool integrations (Apollo, Clay, Truelist) and the ability to generate lead lists in CSV format.
  • Sanitization: Instructions are present to "paraphrase by default" and "quote minimally" when processing external signals to mitigate direct injection risks.
  • [COMMAND_EXECUTION]: The skill references the execution of a specific local CLI tool (node tools/clis/github-prospects.js) for data enrichment from GitHub stargazers and forks. This is a targeted command for included tooling rather than arbitrary code execution.
  • [EXTERNAL_DOWNLOADS]: The skill references and integrates with multiple well-known B2B data services and APIs, including Apollo, ZoomInfo, Clay, Clearbit, and Truelist. These are recognized industry services used for the skill's primary purpose of lead generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 10:25 PM