outreach-sequence-builder
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local files (docs/icp.md, docs/accounts/*.md) and user prompts to generate outreach messages.
- Ingestion points: SKILL.md reads target personas and company profiles from the project directory and accepts detailed buyer signals from the user.
- Boundary markers: Delimiters are absent when interpolating this external context into the JSON payload sent to the Gemini API.
- Capability inventory: The skill can write files to the local file system (docs/sequences/) and create email drafts in Gmail using the GMAIL_CREATE_EMAIL_DRAFT tool via Composio.
- Sanitization: No specific filtering of ingested content is performed before processing.
- [EXTERNAL_DOWNLOADS]: Communicates with Google's official Gemini API (generativelanguage.googleapis.com) to generate sequence content. This is a core part of the skill's functionality.
- [COMMAND_EXECUTION]: The skill uses shell commands to check environment variables and project files. It executes ls and echo to verify the presence of API keys and configuration files in the project directory. It also uses python3 -c to parse the JSON response from the Gemini API.
- [REMOTE_CODE_EXECUTION]: The skill pipes the output of a network request directly into a Python interpreter for processing. The request targets a well-known service (Google Gemini) to handle JSON data parsing.
Audit Metadata