contact-onboard — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited contact-onboard (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Streamline adding new contacts with duplicate detection, bulk operations, updates, and contextual notes.
Use when the user provides one contact to add.
list_contacts with search set to the email or namecreate_contact with all provided detailsadd_contact_noteUse when the user provides multiple contacts at once (a list, CSV paste, or describes several people).
list_contacts with searchcreate_contactUse when the user wants to modify an existing contact's details.
list_contacts with search or get_contact if ID is knownupdate_contact with only the fields that need changingUse when the user wants to remove a contact (e.g., test data, duplicate cleanup).
list_contacts with search or get_contactdelete_contactIf the user provides partial info, ask for:
Do not ask for fields the user has not mentioned. Keep it lightweight.
| User Says | Workflow |
|---|---|
| "Add John Smith [email protected]" | Single Onboard |
| "Onboard these 5 contacts: ..." | Bulk Onboard |
| "Update the email for Sarah to [email protected]" | Update Existing |
| "Delete the test contact" | Delete Contact |
| "Register a lead: Maria Lopez, [email protected], interested in Enterprise" | Single Onboard + note |
Contact Created
show_ids is enabled in settings)_Bulk Onboard Complete
| Name | Status | |
|---|---|---|
| [name] | [email] | Created / Duplicate / Error |
"A contact with that email already exists: [name] (ID: [id]). Would you like to update their information instead?"
update_contact~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.