prospect
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses designated Apollo MCP tools to perform lead generation tasks as described. No malicious code, obfuscation, or unauthorized exfiltration patterns were identified.
- [PROMPT_INJECTION]: The skill parses user input from the
$ARGUMENTSvariable to define search filters. This is a standard functional requirement for this skill but represents a surface where adversarial input could attempt to influence the agent's behavior. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from user input and external API results which could potentially contain instructions.
- Ingestion points:
$ARGUMENTSinSKILL.mdand data returned frommcp__claude_ai_Apollo_MCPtools. - Boundary markers: None present.
- Capability inventory: Searching, enriching, and saving contacts via Apollo MCP tools.
- Sanitization: No explicit sanitization of data retrieved from the Apollo API is implemented.
Audit Metadata