agency-signal-sourcer
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown-based documentation and templates. It does not include any executable scripts (.py, .js, .sh), binary files, or automated configuration routines.
- [INDIRECT_PROMPT_INJECTION]: The skill describes workflows for processing external data such as LinkedIn profiles, company websites, and social media engagement. While this constitutes a potential attack surface for indirect prompt injection from untrusted external data, the skill does not provide code to automate this processing and includes specific instructions on data privacy and GDPR compliance, mitigating the risk.
- [COMMAND_EXECUTION]: The documentation mentions various CLI and API tools (e.g., Serper API, Claygent, Zenrows) used in the industry for data enrichment. However, the skill does not contain any instructions for the agent to execute arbitrary shell commands or exfiltrate sensitive environment variables.
Audit Metadata