Security audit
Extruct List Building Skill
Security checks for vulnerabilities and agentic risk
Overview
This is a disclosed Extruct list-building workflow, with no executable code, but users should understand that it relies on a separate API skill and may send company-list data to Extruct.
Before installing, verify that you also trust the separate extruct-api skill, confirm which company context files or CSVs may be used, and review search scope, DNC exclusions, result size, and upload destination before creating Extruct tables.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.