Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed markdown-only lead intake workflow skill, with privacy and consent considerations users should handle before connecting it to CRM, email, SMS, or calendar tools.
Before using this skill with real prospects, configure consent and opt-in language, limit collected fields to what you need, review any automated messages before enabling them, and ensure CRM, email, SMS, and newsletter integrations follow applicable privacy and marketing rules.
Code or instructions that leak agent conversation context to external services, potentially exposing sensitive user interactions.
- 3+ months → Nurture track
4. "Tell me about your business..." (Open text)
- Capture context for personalized response
### Phase 3: Lead Scoring
The description says to use the skill whenever the user needs to qualify leads, set up onboarding, or filter prospects before calls, which is a wide set of common business scenarios rather than a narrowly defined trigger. It does not provide specific invocation phrases, scope limits, or exclusion examples, increasing the chance of unintended activation.
The skill explicitly instructs collection of prospect information and integration with CRM, email, SMS, calendar, and newsletter systems, yet provides no privacy, consent, retention, or data-handling guidance. This can lead users to collect personal or business-sensitive data and distribute it across third-party systems without appropriate notice, opt-in, minimization, or compliance controls.
No suspicious patterns detected.