Confirm the source
Compare the repository, publisher, and installation command before continuing.
✓
Third-party audit
PassedGen Agent Trust Hub
sales-kickoff · mbfinotti/sales-skills
Provider summary
The skill is a router for sales tasks that automates context gathering by reading project files, git logs, and CRM data. This automated ingestion of untrusted local data creates a surface for indirect prompt injection. Additionally, the skill reads sensitive locations like the .github/ directory and other agent instruction files, and it persists state by modifying local project files.
The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- pass
- Risk level
- NONE
- Audited
- Sep 13, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.