スキル outreachgenie-list-audit
📦
outreachgenie-list-audit
コンテンツリビジョン r1 安全 🌐 ネットワークアクセス⚡ スクリプトを含む⚙️ 外部コマンド📁 ファイルシステムへのアクセス🔑 環境変数
Audit OutreachGenie Lists and Flow Templates
Saved prospect lists can contain missing template values, incomplete captures, and text that exceeds product limits. This skill checks selected snapshots locally and produces private reports without modifying records or sending messages.
対応: Claude Codex Code(CC)
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "outreachgenie-list-audit" from https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit.md and its manifest at https://skillstore.io/api/skills/outreachgenie-outreachgenie-list-audit/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「outreachgenie-list-audit」を使用しています。 Run the bundled fictional snapshot audit.
期待される結果:
- Coverage: all selected memberships captured; three unique prospects across four list memberships.
- Text fields checked: four. Findings include missing list metadata, empty required rendered text, and a rendered invitation above its limit.
- One invitation measures 232 UTF-16 units against a limit of 200.
- Unchecked action: reply check. These results do not authorize campaign activation or sending.
「outreachgenie-list-audit」を使用しています。 Review a snapshot with a missing selected-list page and a referenced custom-field container that was not captured.
期待される結果:
- Coverage is incomplete because a selected-list page is missing.
- The referenced custom value is unknown, not a confirmed blank.
- Capture the missing evidence before drawing completeness or rendered-text conclusions.
- No records were modified and no messages were sent.
セキュリティ監査
安全v1 • 2026/10/16 バージョン別レポートを開く
All 84 static findings are false positives involving validation helpers, dictionary operations, Markdown syntax, privacy controls, or bounded offline tests. No evidence found of credential collection, unauthorized transmission, destructive behavior, or prompt injection in the reviewed files. Connected collection processes selected records through the MCP service and AI host; snapshots and reports still require private storage.
9
スキャンされたファイル
1,564
解析済み行数
0
レビュー項目
0
誤検知を無視
リスク要因
🌐 ネットワークアクセス (2)
⚡ スクリプトを含む (39)
scripts/audit.py:49 scripts/audit.py:60 scripts/audit.py:66 scripts/audit.py:74 scripts/audit.py:102 scripts/audit.py:218-219 scripts/audit.py:225 scripts/audit.py:227-228 scripts/audit.py:235 scripts/audit.py:237-238 scripts/audit.py:291 scripts/audit.py:296-297 scripts/audit.py:302-303 scripts/audit.py:308 scripts/audit.py:311 scripts/audit.py:319-320 scripts/audit.py:323 scripts/audit.py:325-326 scripts/audit.py:331-332 scripts/audit.py:337-338 scripts/audit.py:344-345 scripts/audit.py:348-349 scripts/audit.py:352-353 scripts/audit.py:357-358 scripts/audit.py:365-366 scripts/audit.py:372-373 scripts/audit.py:380-381 scripts/audit.py:390-391 scripts/audit.py:437-438 scripts/audit.py:442 scripts/audit.py:445 scripts/audit.py:451-452 scripts/audit.py:474-475 scripts/audit.py:484-485 scripts/audit.py:489-490 scripts/audit.py:501-502 scripts/audit.py:505 scripts/audit.py:538 scripts/audit.py:546-547
⚙️ 外部コマンド (10)
📁 ファイルシステムへのアクセス (6)
最新の完了済み静的・セマンティック監査では、確認済みのセキュリティ検出事項は見つかりませんでした。これは、スキルに副作用がないことを証明するものではありません。
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/outreachgenie-outreachgenie-list-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/outreachgenie-outreachgenie-list-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
outreachgenie. (2026). outreachgenie-list-audit security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1BibTeX形式の引用
@techreport{outreachgenie-outreachgenie-outreachgenie-list-audit-2026,
author = {outreachgenie},
title = {outreachgenie-list-audit security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "outreachgenie-list-audit security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "outreachgenie"
date-released: "2026-10-16"
url: "https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1"
identifiers:
- type: other
value: "skillstore:outreachgenie-outreachgenie-list-audit:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 68
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
83
仕様準拠
作成できるもの
Review Saved Outreach Templates
Find empty personalization values and product text-limit failures before separately deciding whether to prepare a campaign.
Verify Selected List Evidence
Check pagination completeness, duplicate memberships, and list-specific field metadata in an authorized capture.
Evaluate the Offline Audit
Run the fictional fixture and behavioral tests before planning a connected MCP integration.
これらのプロンプトを試す
Run the Fictional Demo
Run the bundled fictional snapshot audit in a new private directory. Summarize membership coverage and template findings without exposing saved values.
Audit an Existing Snapshot
Audit the snapshot at [private snapshot path] into [new private output directory]. Separate empty values, unknown evidence, text-limit failures, and coverage issues.
Collect a Selected Workspace
Verify workspace [workspace ID]. Capture flow [flow ID] and lists [list IDs] using documented read tools. Preserve scope and pagination. Run the local audit. Report any incomplete collection without changing records.
Compare List-Specific Evidence
Audit [private snapshot path] for flow [flow ID] across selected lists [list IDs]. Compare list metadata with referenced custom fields. Distinguish unknown values from known blanks. Explain duplicate memberships, unchecked actions, and coverage limits. Propose separate follow-up tasks without changing data or activating campaigns.
ベストプラクティス
- Confirm workspace, flow, and list identifiers; capture unfiltered pages in order and label partial evidence explicitly.
- Use authorized read access, prefer OAuth limited to crm.read, and keep snapshots and reports outside public or synced repositories.
- Review unknowns and unchecked actions separately; treat corrections and campaign decisions as separately authorized tasks.
回避
- Treating zero findings or a successful exit code as campaign readiness, contact permission, deliverability, or policy compliance.
- Inventing missing values, merging unrelated captures, removing duplicate evidence silently, or choosing ambiguous lists without confirmation.
- Pasting credentials into chat, publishing customer snapshots, or claiming connected collection has no third-party processing.
よくある質問
Does this skill send messages or change records?
No. It uses captured read results and writes local reports. It does not activate campaigns, enrich prospects, or perform LinkedIn actions.
Can I try it without an OutreachGenie account?
Yes. The bundled fictional fixture and offline tests need only local Python 3.10 or newer.
What is required for a connected audit?
You need authorized workspace access, saved lists and a flow, an MCP-capable host, private local storage, and Python 3.10 or newer.
Does connected collection stay entirely offline?
No. The local helper makes no network calls, but connected collection shares returned records with the MCP service and chosen AI host.
What do complete coverage and zero findings mean?
They describe only the supplied snapshot and implemented checks. They do not prove live completeness, contact permission, delivery, or readiness to send.
Are Claude, Codex, and Claude Code integrations verified?
No. The package uses the Agent Skills format, but real account connections and named-host invocation remain unvalidated. Local Python execution is required.