lead-triage
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Integration with Productivity Tools: The skill is designed to interact with HubSpot, Mail, and Calendar platforms to collect lead data, analyze engagement history, and identify scheduling availability. These integrations are essential for the skill's primary function of lead scoring and triage.
- Processing of Untrusted CRM Data: The scoring model in
reference/hubspot-scoring.mdreads lead notes to identify urgency markers. As these notes can contain content provided by external leads or other users, they represent a potential surface for indirect prompt injection. While the skill does not currently implement explicit boundary markers or sanitization for this text, the risk is mitigated because the agent's actions are limited to generating talking points and follow-up drafts for user review. - Autonomy Constraints and User Oversight: The instructions in
SKILL.mdestablish clear 'Approval Gates' that prevent the agent from sending emails, creating calendar events, or altering lead statuses without manual confirmation. This architectural choice ensures that the user maintains complete control over all external communications and administrative changes.
Audit Metadata