prospecting
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, including prospect websites, social media (Reddit, Hacker News via
last30days), and forum threads using tools such as Firecrawl, Browserbase, andsocial-fetch. This data is ingested to qualify candidates and draft outreach copy. - Ingestion Points: Ingests data from public discourse and business websites (
references/demand-signals.md,references/local-prospecting.md). - Boundary Markers: Absent. The instructions do not specify the use of delimiters or warnings to ignore embedded instructions in the scraped content.
- Capability Inventory: The skill can write to CSV files, generate markdown tables, and draft email content based on the ingested data.
- Sanitization: No explicit sanitization or filtering of external content is mentioned before it is processed by the agent.
- [COMMAND_EXECUTION]: The skill instructions provide specific command-line strings for the agent to execute, specifically involving a local tool:
node tools/clis/github-prospects.js stargazers <owner/repo> --enrich --with-company --format csv. This confirms the agent is expected to perform shell command execution as part of its workflow (references/saas-prospecting.md,references/data-sources.md). - [EXTERNAL_DOWNLOADS]: The skill references and integrates with multiple third-party B2B data and enrichment services, including Apollo, ZoomInfo, Clay, Clearbit, and Truelist. While these are well-known professional services, they represent a reliance on external infrastructure for core functionality.
Audit Metadata