prospecting

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, including prospect websites, social media (Reddit, Hacker News via last30days), and forum threads using tools such as Firecrawl, Browserbase, and social-fetch. This data is ingested to qualify candidates and draft outreach copy.
  • Ingestion Points: Ingests data from public discourse and business websites (references/demand-signals.md, references/local-prospecting.md).
  • Boundary Markers: Absent. The instructions do not specify the use of delimiters or warnings to ignore embedded instructions in the scraped content.
  • Capability Inventory: The skill can write to CSV files, generate markdown tables, and draft email content based on the ingested data.
  • Sanitization: No explicit sanitization or filtering of external content is mentioned before it is processed by the agent.
  • [COMMAND_EXECUTION]: The skill instructions provide specific command-line strings for the agent to execute, specifically involving a local tool: node tools/clis/github-prospects.js stargazers <owner/repo> --enrich --with-company --format csv. This confirms the agent is expected to perform shell command execution as part of its workflow (references/saas-prospecting.md, references/data-sources.md).
  • [EXTERNAL_DOWNLOADS]: The skill references and integrates with multiple third-party B2B data and enrichment services, including Apollo, ZoomInfo, Clay, Clearbit, and Truelist. While these are well-known professional services, they represent a reliance on external infrastructure for core functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 05:01 AM