B2B Outbound Sniper

• Outcome: Review
• Latest audit: May 29, 2026, 9:29 PM
• Version:
  1.0.2

Overview

This skill is not malware, but it can automatically add scraped contacts to a live outbound email campaign, so users should review it carefully before installing.

Install only if you intentionally want automated commercial outreach. Use a dedicated Hunter campaign and limited API keys, confirm unsubscribe and legal compliance settings, set strict quotas, review leads before enrollment where possible, and protect or delete local tracking files containing contact data.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 96% confidence
• Finding: The skill declares access to secrets, file writes, and networked automation in metadata and documentation, but the finding indicates those capabilities are not explicitly declared as permissions. That mismatch is dangerous because users and the platform may not receive an accurate trust boundary: the skill can scrape external services, write local config/log files, and use API keys to modify Hunter campaigns, including adding leads that trigger outbound email workflows.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The documentation describes an automated pipeline that scrapes hiring signals, verifies business emails, adds net-new recipients to a Hunter campaign, and states that 'Hunter handles the full send sequence automatically,' but it does not present this as a prominent user warning. This is dangerous because a user could enable the skill expecting research or lead generation only, while in practice it can cause autonomous commercial outreach and associated legal, reputational, and account-abuse consequences.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The script is explicitly designed to send scraped job-board data, discovered domains, and verified recipient details to third-party services (Apify and Hunter) and to load contacts into an outbound campaign automatically. In an agent skill context, this is a genuine security/privacy concern because it performs external data disclosure and campaign mutation without any interactive consent, disclosure prompt, or policy guardrails.

External Transmission

Medium

• Category: Data Exfiltration

Content

"country": "US",
        "maxItems": MAX_ITEMS,
    }
    r = requests.post(url, params=params, json=payload, timeout=300)
    r.raise_for_status()
    return r.json()

• Confidence: 89% confidence
• Finding: requests.post(url, params=params, json=

External Transmission

Medium

• Category: Data Exfiltration

Content

"website": website,
        }]
    }
    r = requests.post(
        f"https://api.hunter.io/v2/campaigns/{campaign_id}/recipients",
        params={"api_key": api_key},
        json=payload,

• Confidence: 95% confidence
• Finding: requests.post( f"https://api.hunter.io/v2/campaigns/{campaign_id}/recipients", params={"api_key": api_key}, json=

External Transmission

Medium

• Category: Data Exfiltration

Content

def hunter_domain_search(api_key, domain, limit=5):
    """Return emails for a domain at or above MIN_CONFIDENCE."""
    r = requests.get(
        "https://api.hunter.io/v2/domain-search",
        params={"domain": domain, "api_key": api_key, "limit": limit},
        timeout=15,
    )

• Confidence: 86% confidence
• Finding: https://api.hunter.io/

External Transmission

Medium

• Category: Data Exfiltration

Content

offset = 0
    while True:
        r = requests.get(
            f"https://api.hunter.io/v2/campaigns/{campaign_id}/recipients",
            params={"api_key": api_key, "limit": 100, "offset": offset},
            timeout=15,
        )

• Confidence: 84% confidence
• Finding: https://api.hunter.io/

VirusTotal

66/66 vendors flagged this skill as clean.