Habilidades outreachgenie-list-audit

📦

outreachgenie-list-audit

Name: outreachgenie-list-audit
Author: outreachgenie

Revisión del contenido r1 Seguro 🌐 Acceso a red⚡ Contiene scripts⚙️ Comandos externos📁 Acceso al sistema de archivos🔑 Variables de entorno

Audit OutreachGenie Lists and Flow Templates

Saved prospect lists can contain missing template values, incomplete captures, and text that exceeds product limits. This skill checks selected snapshots locally and produces private reports without modifying records or sending messages.

Compatible con: Claude Codex Code(CC)

🥈 81 Plata

Maintain this Skill? Claim it 🥈 81 Plata

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "outreachgenie-list-audit" from https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit.md and its manifest at https://skillstore.io/api/skills/outreachgenie-outreachgenie-list-audit/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/outreachgenie-outreachgenie-list-audit.md Manifest firmado GET /api/skills/outreachgenie-outreachgenie-list-audit/manifest Lockfile firmado GET /api/skills/outreachgenie-outreachgenie-list-audit/lockfile

Pruébalo

Usando "outreachgenie-list-audit". Run the bundled fictional snapshot audit.

Resultado esperado:

Coverage: all selected memberships captured; three unique prospects across four list memberships.
Text fields checked: four. Findings include missing list metadata, empty required rendered text, and a rendered invitation above its limit.
One invitation measures 232 UTF-16 units against a limit of 200.
Unchecked action: reply check. These results do not authorize campaign activation or sending.

Usando "outreachgenie-list-audit". Review a snapshot with a missing selected-list page and a referenced custom-field container that was not captured.

Resultado esperado:

Coverage is incomplete because a selected-list page is missing.
The referenced custom value is unknown, not a confirmed blank.
Capture the missing evidence before drawing completeness or rendered-text conclusions.
No records were modified and no messages were sent.

Auditoría de seguridad

Seguro

v1 • 16/10/2026 Abrir el informe versionado

All 84 static findings are false positives involving validation helpers, dictionary operations, Markdown syntax, privacy controls, or bounded offline tests. No evidence found of credential collection, unauthorized transmission, destructive behavior, or prompt injection in the reviewed files. Connected collection processes selected records through the MCP service and AI host; snapshots and reports still require private storage.

Archivos escaneados

1,564

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Factores de riesgo

🌐 Acceso a red (2)

references/setup.md:13 scripts/test_audit.py:97

⚡ Contiene scripts (39)

scripts/audit.py:49 scripts/audit.py:60 scripts/audit.py:66 scripts/audit.py:74 scripts/audit.py:102 scripts/audit.py:218-219 scripts/audit.py:225 scripts/audit.py:227-228 scripts/audit.py:235 scripts/audit.py:237-238 scripts/audit.py:291 scripts/audit.py:296-297 scripts/audit.py:302-303 scripts/audit.py:308 scripts/audit.py:311 scripts/audit.py:319-320 scripts/audit.py:323 scripts/audit.py:325-326 scripts/audit.py:331-332 scripts/audit.py:337-338 scripts/audit.py:344-345 scripts/audit.py:348-349 scripts/audit.py:352-353 scripts/audit.py:357-358 scripts/audit.py:365-366 scripts/audit.py:372-373 scripts/audit.py:380-381 scripts/audit.py:390-391 scripts/audit.py:437-438 scripts/audit.py:442 scripts/audit.py:445 scripts/audit.py:451-452 scripts/audit.py:474-475 scripts/audit.py:484-485 scripts/audit.py:489-490 scripts/audit.py:501-502 scripts/audit.py:505 scripts/audit.py:538 scripts/audit.py:546-547

⚙️ Comandos externos (10)

scripts/audit.py:659 scripts/test_audit.py:106 scripts/test_audit.py:346 scripts/test_audit.py:355 SKILL.md:15 SKILL.md:19 SKILL.md:23-25 SKILL.md:25-28 SKILL.md:28-34 SKILL.md:34-37

📁 Acceso al sistema de archivos (6)

scripts/audit.py:136 scripts/audit.py:750 scripts/test_audit.py:8 scripts/test_audit.py:78 scripts/test_audit.py:102 scripts/test_audit.py:336

🔑 Variables de entorno (4)

scripts/audit.py:242 scripts/audit.py:244 scripts/audit.py:280 scripts/audit.py:282

La auditoría estática y semántica completada más reciente no detectó hallazgos de seguridad confirmados. Esto no demuestra que el skill no tenga efectos secundarios.

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/outreachgenie-outreachgenie-list-audit/security.svg)](https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/outreachgenie-outreachgenie-list-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/outreachgenie-outreachgenie-list-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

outreachgenie. (2026). outreachgenie-list-audit security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1

Cita BibTeX

@techreport{outreachgenie-outreachgenie-outreachgenie-list-audit-2026,
  author = {outreachgenie},
  title = {outreachgenie-list-audit security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "outreachgenie-list-audit security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "outreachgenie"
date-released: "2026-10-16"
url: "https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1"
identifiers:
  - type: other
    value: "skillstore:outreachgenie-outreachgenie-list-audit:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Review Saved Outreach Templates

Find empty personalization values and product text-limit failures before separately deciding whether to prepare a campaign.

Verify Selected List Evidence

Check pagination completeness, duplicate memberships, and list-specific field metadata in an authorized capture.

Evaluate the Offline Audit

Run the fictional fixture and behavioral tests before planning a connected MCP integration.

Prueba estos prompts

Run the Fictional Demo

Run the bundled fictional snapshot audit in a new private directory. Summarize membership coverage and template findings without exposing saved values.

Audit an Existing Snapshot

Audit the snapshot at [private snapshot path] into [new private output directory]. Separate empty values, unknown evidence, text-limit failures, and coverage issues.

Collect a Selected Workspace

Verify workspace [workspace ID]. Capture flow [flow ID] and lists [list IDs] using documented read tools. Preserve scope and pagination. Run the local audit. Report any incomplete collection without changing records.

Compare List-Specific Evidence

Audit [private snapshot path] for flow [flow ID] across selected lists [list IDs]. Compare list metadata with referenced custom fields. Distinguish unknown values from known blanks. Explain duplicate memberships, unchecked actions, and coverage limits. Propose separate follow-up tasks without changing data or activating campaigns.

Mejores prácticas

Confirm workspace, flow, and list identifiers; capture unfiltered pages in order and label partial evidence explicitly.
Use authorized read access, prefer OAuth limited to crm.read, and keep snapshots and reports outside public or synced repositories.
Review unknowns and unchecked actions separately; treat corrections and campaign decisions as separately authorized tasks.

Evitar

Treating zero findings or a successful exit code as campaign readiness, contact permission, deliverability, or policy compliance.
Inventing missing values, merging unrelated captures, removing duplicate evidence silently, or choosing ambiguous lists without confirmation.
Pasting credentials into chat, publishing customer snapshots, or claiming connected collection has no third-party processing.

Preguntas frecuentes

Does this skill send messages or change records?

No. It uses captured read results and writes local reports. It does not activate campaigns, enrich prospects, or perform LinkedIn actions.

Can I try it without an OutreachGenie account?

Yes. The bundled fictional fixture and offline tests need only local Python 3.10 or newer.

What is required for a connected audit?

You need authorized workspace access, saved lists and a flow, an MCP-capable host, private local storage, and Python 3.10 or newer.

Does connected collection stay entirely offline?

No. The local helper makes no network calls, but connected collection shares returned records with the MCP service and chosen AI host.

What do complete coverage and zero findings mean?

They describe only the supplied snapshot and implemented checks. They do not prove live completeness, contact permission, delivery, or readiness to send.

Are Claude, Codex, and Claude Code integrations verified?

No. The package uses the Agent Skills format, but real account connections and named-host invocation remain unvalidated. Local Python execution is required.