Back to skill

Security audit

AI Cold Email & LinkedIn Outreach Generator

Security checks for vulnerabilities and agentic risk

Overview

This skill only drafts B2B sales outreach copy and does not send messages, connect to accounts, install code, or persist anything.

Before installing, users should know this is a drafting aid for sales outreach only. Review generated copy before use and follow applicable anti-spam and privacy laws; the artifact itself says it does not send emails or connect to outreach platforms.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

The skill explicitly instructs broad activation for 'any task involving outbound messaging' and even casual phrasing, which can cause the agent to invoke this skill outside the user's actual intent. In a sales-copy skill, over-triggering is risky because it can steer unrelated conversations into persuasive outbound-content generation and override more appropriate, narrower skills.

Content

No source excerpt is available for this finding.

Vague Triggers

High
Category
Not specified by scanner
Confidence
96% confidence
Finding

The trigger examples include ambiguous phrases such as 'help me reach out' and 'write a follow-up' without requiring clear sales or prospecting context. This makes accidental activation more likely, which can misroute user requests and bias the model toward outreach behavior even when the user meant a different type of communication.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The metadata sets 'language: en', and the file does not indicate that users may opt into other languages or that English-only behavior is required for a documented regional purpose. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.