Extruct API Skill

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 5:23 AM UTC
• Version: 1.0.0

Overview

This is a disclosed Extruct API helper for company and people enrichment, with privacy and deletion risks users should manage explicitly.

Install only if you intend to let an agent use your Extruct account for company/table operations and business contact enrichment. Require explicit confirmation before deletes or bulk runs, and use email/phone/LinkedIn enrichment only where you have authorization and a lawful business basis.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.

md

- Resolve it from the directory that contains this `SKILL.md`.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The skill explicitly enables contact-finding and people enrichment workflows, including email and phone discovery, but it provides no privacy, consent, or acceptable-use guardrails. In a skill centered on discovering and enriching personal/contact data, the absence of warnings or handling constraints increases the risk of misuse for scraping, profiling, or unauthorized outreach.

Content

No source excerpt is available for this finding.

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 80% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 69)May include surrounding context.

md

- if the URL includes extra path segments, query params, or fragments, still extract the id from the `/tables/<table_id>` or `/tasks/<task_id>` segment
- if the user provides a raw table UUID, use it directly as the table id
- if the user provides a raw task UUID, use it directly as the task id
- do not ask the user to restate an id that is already present in the URL
- when a table URL is present, default to the existing-table workflow unless the user explicitly asks for a new table or a search workflow
- when a task URL is present, default to the Deep Search task workflow unless the user explicitly asks to start a new search task

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The guide encourages use of person-level enrichment features such as email finding, phone finding, and reverse email lookup without any accompanying warning about privacy-sensitive personal data handling, lawful basis, or consent requirements. In an agent skill, this omission can normalize automated collection of direct contact details and profile linkage in ways that may violate policy, user expectations, or data protection rules when used on real individuals.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

This playbook explicitly supports enrichment of people rows with email, phone, LinkedIn, and contact-finding workflows, but it does not include any privacy, consent, permissible-use, or legal-compliance guardrails. In a people-research context, that omission materially increases the risk of misuse for intrusive profiling, unauthorized contact harvesting, or processing personal data without an appropriate basis.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.