Compétences outreachgenie-list-audit

📦

outreachgenie-list-audit

Name: outreachgenie-list-audit
Author: outreachgenie

Révision du contenu r1 Sûr 🌐 Accès réseau⚡ Contient des scripts⚙️ Commandes externes📁 Accès au système de fichiers🔑 Variables d’environnement

Audit OutreachGenie Lists and Flow Templates

Saved prospect lists can contain missing template values, incomplete captures, and text that exceeds product limits. This skill checks selected snapshots locally and produces private reports without modifying records or sending messages.

Prend en charge: Claude Codex Code(CC)

🥈 81 Argent

Maintain this Skill? Claim it 🥈 81 Argent

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "outreachgenie-list-audit" from https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit.md and its manifest at https://skillstore.io/api/skills/outreachgenie-outreachgenie-list-audit/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/outreachgenie-outreachgenie-list-audit.md manifest signé GET /api/skills/outreachgenie-outreachgenie-list-audit/manifest lockfile signé GET /api/skills/outreachgenie-outreachgenie-list-audit/lockfile

Tester

Utilisation de « outreachgenie-list-audit ». Run the bundled fictional snapshot audit.

Résultat attendu:

Coverage: all selected memberships captured; three unique prospects across four list memberships.
Text fields checked: four. Findings include missing list metadata, empty required rendered text, and a rendered invitation above its limit.
One invitation measures 232 UTF-16 units against a limit of 200.
Unchecked action: reply check. These results do not authorize campaign activation or sending.

Utilisation de « outreachgenie-list-audit ». Review a snapshot with a missing selected-list page and a referenced custom-field container that was not captured.

Résultat attendu:

Coverage is incomplete because a selected-list page is missing.
The referenced custom value is unknown, not a confirmed blank.
Capture the missing evidence before drawing completeness or rendered-text conclusions.
No records were modified and no messages were sent.

Audit de sécurité

Sûr

v1 • 16/10/2026 Ouvrir le rapport versionné

All 84 static findings are false positives involving validation helpers, dictionary operations, Markdown syntax, privacy controls, or bounded offline tests. No evidence found of credential collection, unauthorized transmission, destructive behavior, or prompt injection in the reviewed files. Connected collection processes selected records through the MCP service and AI host; snapshots and reports still require private storage.

Fichiers analysés

1,564

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Facteurs de risque

🌐 Accès réseau (2)

references/setup.md:13 scripts/test_audit.py:97

⚡ Contient des scripts (39)

scripts/audit.py:49 scripts/audit.py:60 scripts/audit.py:66 scripts/audit.py:74 scripts/audit.py:102 scripts/audit.py:218-219 scripts/audit.py:225 scripts/audit.py:227-228 scripts/audit.py:235 scripts/audit.py:237-238 scripts/audit.py:291 scripts/audit.py:296-297 scripts/audit.py:302-303 scripts/audit.py:308 scripts/audit.py:311 scripts/audit.py:319-320 scripts/audit.py:323 scripts/audit.py:325-326 scripts/audit.py:331-332 scripts/audit.py:337-338 scripts/audit.py:344-345 scripts/audit.py:348-349 scripts/audit.py:352-353 scripts/audit.py:357-358 scripts/audit.py:365-366 scripts/audit.py:372-373 scripts/audit.py:380-381 scripts/audit.py:390-391 scripts/audit.py:437-438 scripts/audit.py:442 scripts/audit.py:445 scripts/audit.py:451-452 scripts/audit.py:474-475 scripts/audit.py:484-485 scripts/audit.py:489-490 scripts/audit.py:501-502 scripts/audit.py:505 scripts/audit.py:538 scripts/audit.py:546-547

⚙️ Commandes externes (10)

scripts/audit.py:659 scripts/test_audit.py:106 scripts/test_audit.py:346 scripts/test_audit.py:355 SKILL.md:15 SKILL.md:19 SKILL.md:23-25 SKILL.md:25-28 SKILL.md:28-34 SKILL.md:34-37

📁 Accès au système de fichiers (6)

scripts/audit.py:136 scripts/audit.py:750 scripts/test_audit.py:8 scripts/test_audit.py:78 scripts/test_audit.py:102 scripts/test_audit.py:336

🔑 Variables d’environnement (4)

scripts/audit.py:242 scripts/audit.py:244 scripts/audit.py:280 scripts/audit.py:282

Le dernier audit statique et sémantique terminé n’a détecté aucun constat de sécurité confirmé. Cela ne prouve pas que le skill est sans effets secondaires.

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/outreachgenie-outreachgenie-list-audit/security.svg)](https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/outreachgenie-outreachgenie-list-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/outreachgenie-outreachgenie-list-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

outreachgenie. (2026). outreachgenie-list-audit security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1

Citation BibTeX

@techreport{outreachgenie-outreachgenie-outreachgenie-list-audit-2026,
  author = {outreachgenie},
  title = {outreachgenie-list-audit security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "outreachgenie-list-audit security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "outreachgenie"
date-released: "2026-10-16"
url: "https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1"
identifiers:
  - type: other
    value: "skillstore:outreachgenie-outreachgenie-list-audit:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Review Saved Outreach Templates

Find empty personalization values and product text-limit failures before separately deciding whether to prepare a campaign.

Verify Selected List Evidence

Check pagination completeness, duplicate memberships, and list-specific field metadata in an authorized capture.

Evaluate the Offline Audit

Run the fictional fixture and behavioral tests before planning a connected MCP integration.

Essayez ces prompts

Run the Fictional Demo

Run the bundled fictional snapshot audit in a new private directory. Summarize membership coverage and template findings without exposing saved values.

Audit an Existing Snapshot

Audit the snapshot at [private snapshot path] into [new private output directory]. Separate empty values, unknown evidence, text-limit failures, and coverage issues.

Collect a Selected Workspace

Verify workspace [workspace ID]. Capture flow [flow ID] and lists [list IDs] using documented read tools. Preserve scope and pagination. Run the local audit. Report any incomplete collection without changing records.

Compare List-Specific Evidence

Audit [private snapshot path] for flow [flow ID] across selected lists [list IDs]. Compare list metadata with referenced custom fields. Distinguish unknown values from known blanks. Explain duplicate memberships, unchecked actions, and coverage limits. Propose separate follow-up tasks without changing data or activating campaigns.

Bonnes pratiques

Confirm workspace, flow, and list identifiers; capture unfiltered pages in order and label partial evidence explicitly.
Use authorized read access, prefer OAuth limited to crm.read, and keep snapshots and reports outside public or synced repositories.
Review unknowns and unchecked actions separately; treat corrections and campaign decisions as separately authorized tasks.

Éviter

Treating zero findings or a successful exit code as campaign readiness, contact permission, deliverability, or policy compliance.
Inventing missing values, merging unrelated captures, removing duplicate evidence silently, or choosing ambiguous lists without confirmation.
Pasting credentials into chat, publishing customer snapshots, or claiming connected collection has no third-party processing.

Foire aux questions

Does this skill send messages or change records?

No. It uses captured read results and writes local reports. It does not activate campaigns, enrich prospects, or perform LinkedIn actions.

Can I try it without an OutreachGenie account?

Yes. The bundled fictional fixture and offline tests need only local Python 3.10 or newer.

What is required for a connected audit?

You need authorized workspace access, saved lists and a flow, an MCP-capable host, private local storage, and Python 3.10 or newer.

Does connected collection stay entirely offline?

No. The local helper makes no network calls, but connected collection shares returned records with the MCP service and chosen AI host.

What do complete coverage and zero findings mean?

They describe only the supplied snapshot and implemented checks. They do not prove live completeness, contact permission, delivery, or readiness to send.

Are Claude, Codex, and Claude Code integrations verified?

No. The package uses the Agent Skills format, but real account connections and named-host invocation remain unvalidated. Local Python execution is required.