Warnings

• The SKILL.md does not instruct the agent to treat external tool output as untrusted data; malicious content returned from LinkedIn or other sources could attempt prompt injection.
• The API map is essentially a placeholder: every entry says 'See sandbase_describe_tool for details,' so the skill does not document what each tool actually does or returns.
• No explicit privacy or data-minimization guidance is provided for handling personal information of leads, despite the skill being centered on collecting prospect intelligence.
• Quality score needs review
• GitHub adoption: 68 GitHub stars
• Stars/forks activity: 68 stars, 3 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• The SKILL.md does not instruct the agent to treat external tool output as untrusted data; malicious content returned from LinkedIn or other sources could attempt prompt injection.
• The API map is essentially a placeholder: every entry says 'See sandbase_describe_tool for details,' so the skill does not document what each tool actually does or returns.
• No explicit privacy or data-minimization guidance is provided for handling personal information of leads, despite the skill being centered on collecting prospect intelligence.
• Quality score needs review
• GitHub adoption: 68 GitHub stars
• Stars/forks activity: 68 stars, 3 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• The SKILL.md does not instruct the agent to treat external tool output as untrusted data; malicious content returned from LinkedIn or other sources could attempt prompt injection.
• The API map is essentially a placeholder: every entry says 'See sandbase_describe_tool for details,' so the skill does not document what each tool actually does or returns.
• No explicit privacy or data-minimization guidance is provided for handling personal information of leads, despite the skill being centered on collecting prospect intelligence.
• Quality score needs review
• GitHub adoption: 68 GitHub stars
• Stars/forks activity: 68 stars, 3 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• The SKILL.md does not instruct the agent to treat external tool output as untrusted data; malicious content returned from LinkedIn or other sources could attempt prompt injection.
• The API map is essentially a placeholder: every entry says 'See sandbase_describe_tool for details,' so the skill does not document what each tool actually does or returns.
• No explicit privacy or data-minimization guidance is provided for handling personal information of leads, despite the skill being centered on collecting prospect intelligence.
• Quality score needs review
• GitHub adoption: 68 GitHub stars
• Stars/forks activity: 68 stars, 3 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.