apify-lead-scoring-enrichment
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard implementation of a lead enrichment workflow using the Apify cloud platform. All external API calls are made to api.apify.com, which is a well-known and reputable service. Secret management follows industry standards by using environment variables. Users are instructed to store the required APIFY_TOKEN in a .env file, preventing accidental exposure of credentials in the source code or command history.
- [COMMAND_EXECUTION]: The skill uses local shell commands to execute Node.js scripts provided in the package. These scripts perform transparent operations like CSV parsing and API orchestration without any signs of privilege escalation or malicious persistence.
- [EXTERNAL_DOWNLOADS]: Project dependencies are limited to standard, widely-used libraries for CSV manipulation available on the official NPM registry. No remote scripts are downloaded for execution, and all external interactions are mediated through structured API requests.
- [SAFE]: While the skill processes external data (lead lists and user-provided scoring rules), this is the intended primary purpose of the skill. The ingestion points (CSV files) and capabilities (API calls) are properly scoped to the task of lead enrichment.
Audit Metadata