citedy-lead-magnets
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill facilitates the transmission of user-provided content (topics, niches, and descriptions) to Citedy's API endpoints at
citedy.com. This network activity is documented as the core functional purpose of the tool and uses TLS encryption for all traffic. - [INDIRECT_PROMPT_INJECTION]: The skill serves as a generative content interface that ingests user-specified topics to produce PDF documents. While this represents a surface for indirect prompt injection, it is managed through the vendor's API and lacks capabilities that would allow for execution of untrusted instructions in the local environment.
- Ingestion points: User input provided for fields
topic,niche, andplatforminSKILL.md. - Boundary markers: None explicitly defined in the API request construction.
- Capability inventory: Limited to HTTPS POST/GET/PATCH requests to vendor domains; no file-system write or subprocess execution capabilities detected.
- Sanitization: Content generation is handled server-side by the vendor's API.
- [EXTERNAL_DOWNLOADS]: The documentation provides installation instructions involving a Git repository (
github.com/citedy/leads.git) and a package reference for theopenskillsframework. These resources are owned by the verified vendor 'citedy' and are used for standard skill deployment.
Audit Metadata