Skills/skills.sh/sales-outbound-sequence

sales-outbound-sequence@r2

VERIFIED

Publisher claims: "Plans a touch-by-touch outbound cadence - which channel on which day, touch count, spacing, channel mix, multi-threading, exit and stop rules, recycle and re-entry, and the capacity math behind it, with pre-committed metric thresholds. Use whenever the user mentions a sequence, cadence, follow-up timing, Outreach or Salesloft steps, a drip, "how many touches", inbound-lead or event follow-up, closed-lost re-engagement, or B2C lifecycle and SMS flows, even without the word cadence. Do NOT use for message copy, subject lines (mbfinotti/sales-skills@cold-email-subject-line-tester), call scripts (mbfinotti/sales-skills@cold-call-opener), or inbox placement (mbfinotti/sales-skills@cold-email-deliverability)." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher mbfinotti · joined 4 days agoInstalls 26,140Last detonated 1 h ago
$npx skills add sales-outbound-sequence
WatchReport an issue

Is sales-outbound-sequence@r2 safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-26 and scored it 84/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Process kill commandevals/evals.json:106 · Process kill command — agent can terminate processesFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST05
HIGH
Process kill commandevals/evals.json:105 · Process kill command — agent can terminate processesFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST05
HIGH
Process kill commandevals/evals.json:113 · Process kill command — agent can terminate processesFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST05
sales-outbound-sequence@r2 safety verdict: Verified 84/100 — KillerSkills