prospect-list-run
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The pipeline ingests data from external sources including user-provided CSV files and crawled website content to identify business signals.
- Ingestion points: Prospect data is read from CSV files in
build_base.py, while website text is retrieved inrun_sites.pyanddetect_signals_http.py. - Boundary markers: The skill does not implement explicit boundary markers or delimiters when interpolating external content into the final campaign text or generated documents.
- Capability inventory: The agent has the capability to execute local scripts via
subprocess, perform network requests, and write output files to the local file system. - Sanitization: While the scripts use regex patterns to extract specific technical markers (e.g., CMS types, job vacancy codes), raw text snippets and quotes from external websites are stored and eventually included in prospect outreach documents.
- [COMMAND_EXECUTION]: The orchestrator script
run_pipeline.pyusessubprocess.callto execute the various stages of the data pipeline. These calls are restricted to the skill's own internal scripts and use the local Python interpreter. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to interact with the Apify API and directly fetches HTML content from company domains provided in the input prospect list to identify technology stacks and business signals.
Audit Metadata