技能 outreachgenie-list-audit

📦

outreachgenie-list-audit

Name: outreachgenie-list-audit
Author: outreachgenie

內容修訂 r1 安全 🌐 網路存取⚡ 包含腳本⚙️ 外部命令📁 檔案系統存取🔑 環境變數

Audit OutreachGenie Lists and Flow Templates

Saved prospect lists can contain missing template values, incomplete captures, and text that exceeds product limits. This skill checks selected snapshots locally and produces private reports without modifying records or sending messages.

支援: Claude Codex Code(CC)

🥈 81 銀級

Maintain this Skill? Claim it 🥈 81 銀級

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "outreachgenie-list-audit" from https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit.md and its manifest at https://skillstore.io/api/skills/outreachgenie-outreachgenie-list-audit/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/outreachgenie-outreachgenie-list-audit.md 已簽名 manifest GET /api/skills/outreachgenie-outreachgenie-list-audit/manifest 已簽名 lockfile GET /api/skills/outreachgenie-outreachgenie-list-audit/lockfile

測試它

正在使用「outreachgenie-list-audit」。 Run the bundled fictional snapshot audit.

預期結果:

Coverage: all selected memberships captured; three unique prospects across four list memberships.
Text fields checked: four. Findings include missing list metadata, empty required rendered text, and a rendered invitation above its limit.
One invitation measures 232 UTF-16 units against a limit of 200.
Unchecked action: reply check. These results do not authorize campaign activation or sending.

正在使用「outreachgenie-list-audit」。 Review a snapshot with a missing selected-list page and a referenced custom-field container that was not captured.

預期結果:

Coverage is incomplete because a selected-list page is missing.
The referenced custom value is unknown, not a confirmed blank.
Capture the missing evidence before drawing completeness or rendered-text conclusions.
No records were modified and no messages were sent.

安全審計

安全

v1 • 2026/10/16 開啟版本化報告

All 84 static findings are false positives involving validation helpers, dictionary operations, Markdown syntax, privacy controls, or bounded offline tests. No evidence found of credential collection, unauthorized transmission, destructive behavior, or prompt injection in the reviewed files. Connected collection processes selected records through the MCP service and AI host; snapshots and reports still require private storage.

已掃描檔案

1,564

分析行數

複核項目

已忽略的誤報

風險因素

🌐 網路存取 (2)

references/setup.md:13 scripts/test_audit.py:97

⚡ 包含腳本 (39)

scripts/audit.py:49 scripts/audit.py:60 scripts/audit.py:66 scripts/audit.py:74 scripts/audit.py:102 scripts/audit.py:218-219 scripts/audit.py:225 scripts/audit.py:227-228 scripts/audit.py:235 scripts/audit.py:237-238 scripts/audit.py:291 scripts/audit.py:296-297 scripts/audit.py:302-303 scripts/audit.py:308 scripts/audit.py:311 scripts/audit.py:319-320 scripts/audit.py:323 scripts/audit.py:325-326 scripts/audit.py:331-332 scripts/audit.py:337-338 scripts/audit.py:344-345 scripts/audit.py:348-349 scripts/audit.py:352-353 scripts/audit.py:357-358 scripts/audit.py:365-366 scripts/audit.py:372-373 scripts/audit.py:380-381 scripts/audit.py:390-391 scripts/audit.py:437-438 scripts/audit.py:442 scripts/audit.py:445 scripts/audit.py:451-452 scripts/audit.py:474-475 scripts/audit.py:484-485 scripts/audit.py:489-490 scripts/audit.py:501-502 scripts/audit.py:505 scripts/audit.py:538 scripts/audit.py:546-547

⚙️ 外部命令 (10)

scripts/audit.py:659 scripts/test_audit.py:106 scripts/test_audit.py:346 scripts/test_audit.py:355 SKILL.md:15 SKILL.md:19 SKILL.md:23-25 SKILL.md:25-28 SKILL.md:28-34 SKILL.md:34-37

📁 檔案系統存取 (6)

scripts/audit.py:136 scripts/audit.py:750 scripts/test_audit.py:8 scripts/test_audit.py:78 scripts/test_audit.py:102 scripts/test_audit.py:336

🔑 環境變數 (4)

scripts/audit.py:242 scripts/audit.py:244 scripts/audit.py:280 scripts/audit.py:282

最近一次完成的靜態與語意稽核未偵測到已確認的安全發現。這並不能證明該 Skill 沒有副作用。

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/outreachgenie-outreachgenie-list-audit/security.svg)](https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/outreachgenie-outreachgenie-list-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/outreachgenie-outreachgenie-list-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

outreachgenie. (2026). outreachgenie-list-audit security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1

BibTeX 引用

@techreport{outreachgenie-outreachgenie-outreachgenie-list-audit-2026,
  author = {outreachgenie},
  title = {outreachgenie-list-audit security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "outreachgenie-list-audit security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "outreachgenie"
date-released: "2026-10-16"
url: "https://skillstore.io/skills/outreachgenie-outreachgenie-list-audit/audits/1"
identifiers:
  - type: other
    value: "skillstore:outreachgenie-outreachgenie-list-audit:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Review Saved Outreach Templates

Find empty personalization values and product text-limit failures before separately deciding whether to prepare a campaign.

Verify Selected List Evidence

Check pagination completeness, duplicate memberships, and list-specific field metadata in an authorized capture.

Evaluate the Offline Audit

Run the fictional fixture and behavioral tests before planning a connected MCP integration.

試試這些提示

Run the Fictional Demo

Run the bundled fictional snapshot audit in a new private directory. Summarize membership coverage and template findings without exposing saved values.

Audit an Existing Snapshot

Audit the snapshot at [private snapshot path] into [new private output directory]. Separate empty values, unknown evidence, text-limit failures, and coverage issues.

Collect a Selected Workspace

Verify workspace [workspace ID]. Capture flow [flow ID] and lists [list IDs] using documented read tools. Preserve scope and pagination. Run the local audit. Report any incomplete collection without changing records.

Compare List-Specific Evidence

Audit [private snapshot path] for flow [flow ID] across selected lists [list IDs]. Compare list metadata with referenced custom fields. Distinguish unknown values from known blanks. Explain duplicate memberships, unchecked actions, and coverage limits. Propose separate follow-up tasks without changing data or activating campaigns.

最佳實務

Confirm workspace, flow, and list identifiers; capture unfiltered pages in order and label partial evidence explicitly.
Use authorized read access, prefer OAuth limited to crm.read, and keep snapshots and reports outside public or synced repositories.
Review unknowns and unchecked actions separately; treat corrections and campaign decisions as separately authorized tasks.

避免

Treating zero findings or a successful exit code as campaign readiness, contact permission, deliverability, or policy compliance.
Inventing missing values, merging unrelated captures, removing duplicate evidence silently, or choosing ambiguous lists without confirmation.
Pasting credentials into chat, publishing customer snapshots, or claiming connected collection has no third-party processing.

常見問題

Does this skill send messages or change records?

No. It uses captured read results and writes local reports. It does not activate campaigns, enrich prospects, or perform LinkedIn actions.

Can I try it without an OutreachGenie account?

Yes. The bundled fictional fixture and offline tests need only local Python 3.10 or newer.

What is required for a connected audit?

You need authorized workspace access, saved lists and a flow, an MCP-capable host, private local storage, and Python 3.10 or newer.

Does connected collection stay entirely offline?

No. The local helper makes no network calls, but connected collection shares returned records with the MCP service and chosen AI host.

What do complete coverage and zero findings mean?

They describe only the supplied snapshot and implemented checks. They do not prove live completeness, contact permission, delivery, or readiness to send.

Are Claude, Codex, and Claude Code integrations verified?

No. The package uses the Agent Skills format, but real account connections and named-host invocation remain unvalidated. Local Python execution is required.