Security audit
Security checks for vulnerabilities and agentic risk
The skill is a simple lead-qualification prompt with no code or install-time behavior, but it tells the agent to qualify business leads using gender, age, and unexplained US-only criteria.
Review and revise the scoring criteria before using this skill for outreach. Remove gender and age from qualification, document any legitimate geographic limits, and base scoring on business-relevant signals such as vertical, ecommerce platform, visual quality, content needs, budget fit, and available public contact channels.
The skill explicitly uses a protected characteristic, gender, as a qualification factor for lead scoring. This creates discriminatory profiling and can drive unequal access to business opportunities or outreach based on sex rather than legitimate business need, exposing the operator to legal, compliance, and reputational risk.
The skill limits qualification to United States leads only, which is a geographic exclusion criterion without any documented operational, legal, or market-availability justification in the skill. While geography can sometimes be legitimate, leaving it unexplained in an automated scoring workflow increases the risk of arbitrary exclusion and unfair market segmentation.
No suspicious patterns detected.
