lusha — 6 skills

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked ·

Run UTC
Reviewed
Published
Updated

Observations · Limitations · Evidence

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 6 skill declarations. Ran 33 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · skills · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-19T03:15:53Z, tree 22060ae5a1933f41e787436b12b8731b81ffaaa986629e12ea03d74e027f2781.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record
name
lusha — 6 skills
slug
source-skills-927474f07b84d5a272394fd2
type
skills
category
developer-tools
example
false
evidence state
pinned_source_listing
stamp
Pinned source listing — machine-checked
summary
Pinned source declarations and file hashes were listed.
outcome
Listed 6 skill declarations. Ran 33 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results
["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): enrich-contact; lookalike-prospect; outreach-research; outreach-sequence; prospect; signal-prospect"]
task
What declarations and files are present in this pinned source?
setup
Git blob acquisition followed by static source inspection.
limitations
Scope: acquisition and static inspection. Command results: commands.json.
source url
https://github.com/lusha-oss/lusha-mcp-plugin.git
documentation url
https://github.com/lusha-oss/lusha-mcp-plugin.git
commit
c3017a3d6831e444b781044337f0394e76b12d89
tree sha256
22060ae5a1933f41e787436b12b8731b81ffaaa986629e12ea03d74e027f2781
file sha256
{".agents/plugins/marketplace.json":"6d5dc414242af209ae4c9837a764c0c140ca957cc5ad05bc18cefdbb5d12a5f1",".claude-plugin/marketplace.json":"236ec7c7b2fc6765cc0ecfe876e0a824614a8243618aac4a792a74ee58124496",".claude-plugin/plugin.json":"aac1756718243a61d7a30bea25b745d97127525585554b5037e9ca64e492d6a6",".codex-plugin/plugin.json":"218cbebe6d3c7b5a584502661c01b2e1df643ab29c539d1d5c972a8a53f8da9f",".cursor-plugin/marketplace.json":"d3f0204ebfec6204afa1793869fa83a078b69ec0dd2b0b813826d9c578e6ca14",".cursor-plugin/plugin.json":"b2a202131d5bc8cf2c44f64920a28248e56416974266e8fe55f8070ebd3f6d39",".github/CODEOWNERS":"e78720d2b9d475abd302004644eaaa1d5a17f0ad5e6a2ca5d51c9dccf7fe8263",".github/plugin/plugin.json":"77c680d3fcd6685e5dde3bff11d9fdbce5ba8a719158b4468241357779be756c",".gitignore":"929fee495262c3806f664b44e5388cfc9d069f310e7c705dddb275350032e2b7","GEMINI.md":"41889dd2cb0192fc3f3f0b7105f6985fb5249a63372e4e47c75b7e4fc672bc1b","LICENSE":"0d72b0ed00196a2037fa865a124f3cb38fb1a24b5cf8c05f3249895adf271230","README.md":"89af0e368a2c82d74d93c47cdf25bf02db864050ae3fa6769c98ffe0094177e6","SECURITY.md":"c875acbcee15242f0e1cac288484d0cfebb08634464850d249cdeec70b8fcc81","assets/logo.png":"23151d750f4d8d24d1e0bf5762d1fb5964006ab1487c8fe293bebd4b9442fb1e","gemini-extension.json":"e3644e5416f9ff8a6b494febe3787cebabeda9c0365f899b786a2cfd9f260e6f","mcp.json":"319da87c3aaef9bc73d25c63f1d89a00cc5687bbaa248acd03744c439990b1bd","skills/enrich-contact/SKILL.md":"627f0f0e084ddb5479c204a1d984a483f187d8351815a8394d18dd47c2dfa771","skills/lookalike-prospect/SKILL.md":"300488f128d69507539d506e9e68e27045ad6cf77423d7f29670e89f2dfd0ed9","skills/outreach-research/SKILL.md":"aec338a70917c211b9ace1fd206483a7d865259df32c72a97ec8daa948500a31","skills/outreach-research/references/positioning-brief-schema.md":"2d12785272e14a872953a50167c37bc3b323e089cee34f4aa6b6bc5f44dde747","skills/outreach-sequence/SKILL.md":"1477eefdefdb67d4b5abddcfe3f026ae6cd72bbda3634884314eb259400f5781","skills/outreach-sequence/references/message-shapes.md":"eb4fce2ad1afe468b954fea655b65fefb7806d7146e142ad0a16a67e6c7c2be1","skills/outreach-sequence/references/output-schema.md":"1132bbe8805c4462c074ff35b7547ddb7ef2b99c4e4932bfc3fce6ed46a997d3","skills/outreach-sequence/references/post-draft-menu.md":"37271e0a3f3570426eda1d68d6615f9962c8caca2aa894e56c5fcea6b2a5fb1c","skills/prospect/SKILL.md":"d1c4b592ced494c9772849c2c2bffb6e894b5ab6232f75f9aa4fbb07a40328b4","skills/prospect/references/filter-guide.md":"b0c0a26db75de1fa2f608264aecba223aa9be212efff829fd1f11ab881a02355","skills/signal-prospect/SKILL.md":"149008c85561c6f990d3283f5495f8ebf948e15cd7771cc9d0ec52406fcab305","skills/signal-prospect/references/signal-guide.md":"034a8a2c8abe989efbfed0af96250f1a56c4eae81e27371fb868f1a6cf59464d"}
lockfiles
["LOCK.json"]
utc date
2026-10-19T03:15:53Z
source date
2026-10-16
discovered date
2026-10-16
retested date
2026-10-19
reviewed date
2026-10-19
published date
2026-10-19
modified date
2026-10-19
reviewer
Machine-checked
harness version
toolwitness harness at commit c05bfef14b02637a45bbcd2667a9427df3733235
claude code version
Not applicable: static source inspection (commands.json).
model id
Not applicable: static source inspection (commands.json).
scanner version
Not applicable: static source inspection.
rulepack version
Not applicable: static source inspection.
agents
[]
commands
["Ran 33 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list
["Not applicable: static source inspection (commands.json)."]
history
["2026-10-19T03:15:53Z: pinned source inspection"]
application
{"applicationCategory":"DeveloperApplication","name":"lusha — 6 skills","operatingSystem":"Not exercised","softwareVersion":"c3017a3d6831e444b781044337f0394e76b12d89"}
review input
{"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 6 skill declarations. Ran 33 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): enrich-contact; lookalike-prospect; outreach-research; outreach-sequence; prospect; signal-prospect"}],"evidence_sha256":{"LOCK.json":"1a996f62954f89ed2844c0b17f3aa986e4abfd98012c0d27385709f817642976","commands.json":"82fbe2628ea770817572277e1c21f5245a49b71baad02bae675dad3a3842003d","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"1f87657d0aba5c7453651a44525d26c65b5c05a73e648d75a9d0a4e6695e5909","listing.json":"e9acd51d87e2bbe125b855402b1aa152f58f5c52a7896bc9a020a2f2a2b9ed06","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review
{"codex":"17773ea85d147575b5dec1b18d5b5b1cddc90b9df7d8f3d7e4b42cb819d8d8be","date":"2026-10-19","gates":"5e5dbfe6b171eb4e3196f29bd774135759b9b2d61021cb5cdaaa9bdec855190e","grok":"5bb7940cd27988a4372dcec3a1f2a0b09b6f99bf8f1d5ee0678b5b2fb4192c99","kind":"machine-checked","reviewed_sha256":"2c0c0d5c84932b048157fced7f7f805656f9de1091669a6eeb6530e879eec813","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 33 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "skills/enrich-contact/SKILL.md",
        "name": "enrich-contact",
        "description": "Look up a person and get their verified phone numbers, email, and company context. Use when the user says \"look up [name]\", \"get me the contact info for [person]\", \"find [name]'s phone number\", \"who is [name] at [company]\", \"enrich [email or name]\", or any request to retrieve a single person's contact details.\n",
        "files": {
          "skills/enrich-contact/SKILL.md": "627f0f0e084ddb5479c204a1d984a483f187d8351815a8394d18dd47c2dfa771"
        }
      },
      {
        "path": "skills/lookalike-prospect/SKILL.md",
        "name": "lookalike-prospect",
        "description": "Find companies or contacts similar to a set of references, then enrich results with verified phone numbers. Use when the user says \"find companies like my best customers\", \"find more contacts like these\", \"expand from these accounts\", \"who else looks like [company]\", \"find similar companies to [list]\", or any request to discover lookalike targets from a reference set. Requires at least 5 reference companies or contacts for quality results.\n",
        "files": {
          "skills/lookalike-prospect/SKILL.md": "300488f128d69507539d506e9e68e27045ad6cf77423d7f29670e89f2dfd0ed9"
        }
      },
      {
        "path": "skills/outreach-research/SKILL.md",
        "name": "outreach-research",
        "description": "Builds a reusable outreach positioning brief: what the user's company sells, to which personas, with what proof, and against which competitors. Use when asked to build, review or update a positioning brief (including a pasted lusha-outreach-brief), run outreach research, or work out what to say to prospects before drafting (\"lusha outreach brief\"). Not for drafting emails: use outreach-sequence once a brief exists.\n",
        "files": {
          "skills/outreach-research/SKILL.md": "aec338a70917c211b9ace1fd206

Excerpt shown; complete evidence is in the download.

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated