Security audit

Lead Hunter

Security checks for vulnerabilities and agentic risk

Overview

This skill is openly a lead-generation tool, but it needs Review because it encourages broad scraping, email guessing, automatic outreach, and full lead-record sharing without adequate safeguards.

Review before installing. Use only with authorized, compliant sources and approved enrichment providers; disable LinkedIn proxy/evasion guidance, guessed or historical personal-email harvesting, SMTP pings, and automatic outreach unless you have documented permission and suppression-list handling. Configure webhooks only to vetted HTTPS destinations and send minimized fields rather than full lead records.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (6)

other

Error

Location: discovery/sources.md:236
Finding: LinkedIn Anti-Abuse Control Evasion
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Error

Location: discovery/sources.md:32
Finding: Excessive Cross-Platform Personal and Behavioral Data Collection
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Error

Location: enrichment/email-discovery.md:64
Finding: Historical and Inferred Email Address Harvesting
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: enrichment/email-discovery.md:205
Finding: Mailbox Enumeration Through SMTP Probing
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: output/integrations.md:57
Finding: Unrestricted Full Lead Record Disclosure Through Configurable Webhook
Content: View full analysis
Remediation: View remediation

other

Error

Location: scoring/lead-scoring.md:48
Finding: Automated Unsolicited Outreach Based on Inferred Profiles
Content: View full analysis
= 0.90 action: ready_for_outreach risky: confidence: 0.60-0.89 action: send_with_caution limit: 10/day ``` ### Technical Analysis The workflow converts harvested or inferred personal data directly into immediate outreach, automated sequences, and nurture lists. Deliverability confidence is treated as authorization to contact a person, although mailbox validity does not establish identity, consent, a lawful marketing basis, or jurisdictional compliance. No human approval, suppression-list check, unsubscribe requirement, frequency cap across campaigns, or consent gate is specified before the automatic action. ### Attack Path 1. Discover a person through social, developer, launch, or funding sources. 2. Harvest or infer an email address and other contact details. 3. Score the person using title, funding, activity, technology, and engagement signals. 4. Classify the person as hot, warm, or cold. 5. Immediately contact hot leads, enroll warm leads in a sequence, and retain cold leads for nurturing. 6. Continue processing without proof that the recipient agreed to receive communication. ### Impact Assessment This does not grant technical system privileges. It enables automated use of collected contact channels at scale. Potential impact includes: - Spam or harassment of people who did not consent. - Sender-domain and IP reputation damage. - Mail-provider blocks and abuse complaints. - Violations of anti-sp ...[truncated 206 chars]
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Missing User Warnings

High

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The skill explicitly promotes scraping, enrichment, CRM-ready exports, and webhook-triggered outreach while omitting privacy, consent, retention, and external-transmission safeguards. In this context, the combination of lead harvesting and automated downstream delivery materially increases the risk of collecting personal data without authorization and transmitting it to third parties or triggering unsolicited outreach at scale.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The skill description is written as broad marketing copy ('Automated lead generation + enrichment for AI agents') without clear activation boundaries, permitted data sources, or operational limits. In an autonomous-agent context, vague capability framing can cause overbroad collection, enrichment, and outreach behavior beyond what a user intended, especially when paired with scraping and automation features.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This section explicitly collects and exports personal/contact-related data such as LinkedIn profiles and email patterns, but it does not include meaningful privacy, consent, retention, or lawful-use guidance. In a lead-generation skill, that omission increases the likelihood of bulk profiling, unauthorized enrichment, and downstream misuse of personal data.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The Product Hunt section recommends scraping as the primary access method and provides operational guidance, but does not clearly warn about data-collection, platform-policy, and legal/privacy risks. In practice, this can normalize unauthorized scraping and mass extraction of maker identities and linked accounts for commercial prospecting.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill explicitly instructs users to scrape personal emails from public sources and enrich contact records through third-party providers, but it provides no warning about privacy obligations, consent requirements, or lawful-use constraints. In a lead-generation context, this omission can normalize unauthorized collection and processing of personal data, increasing the risk of privacy violations, regulatory noncompliance, and abusive outreach workflows.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The webhook configuration sends the full lead object and detected signals to an arbitrary external URL, which can include personal and company data such as email, phone, social profiles, and enrichment metadata. In a lead-generation skill, this creates a real risk of unintended exfiltration or over-sharing of sensitive prospect data, especially because the documentation provides no warning, minimization guidance, or approval controls around external transmission.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.