Scan Report
5 /100
prospect-enrichment
Enriches prospect and company profiles by scraping their website and searching for additional context to build comprehensive profiles.
This is a documentation-only skill (SKILL.md) describing a legitimate prospect enrichment workflow using Firecrawl and Exa CLI tools. No executable code, no hidden functionality, and no security concerns.
Safe to install
No action needed. The skill is a well-documented workflow for sales/marketing prospect research.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Network | NONE | READ | ✓ Aligned | SKILL.md documents web scraping via firecrawl.js CLI |
| Filesystem | NONE | NONE | — | SKILL.md references CLI tool paths but no direct file operations |
| Shell | NONE | NONE | — | CLI tool invocations via node are documented, not raw shell commands |
File Tree
1 files · 8.2 KB · 204 lines Markdown 1f · 204L
└─
SKILL.md
Markdown
Security Positives
✓ Documentation-only skill with no executable code present
✓ All behavior is clearly documented in SKILL.md
✓ No sensitive path access (no ~/.ssh, ~/.aws, .env references)
✓ No credential harvesting or environment variable iteration
✓ No obfuscation techniques (no base64, eval, atob)
✓ No suspicious network patterns (no direct IP calls or C2 communication)
✓ No supply chain concerns (no dependencies or package files)
✓ No persistence mechanisms (no cron, startup hooks, or backdoors)
✓ Workflow is a legitimate business use case (prospect research for sales)