citedy-lead-magnets

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DATA_EXFILTRATION]: The skill facilitates the transmission of user-provided content (topics, niches, and descriptions) to Citedy's API endpoints at citedy.com. This network activity is documented as the core functional purpose of the tool and uses TLS encryption for all traffic.
  • [INDIRECT_PROMPT_INJECTION]: The skill serves as a generative content interface that ingests user-specified topics to produce PDF documents. While this represents a surface for indirect prompt injection, it is managed through the vendor's API and lacks capabilities that would allow for execution of untrusted instructions in the local environment.
  • Ingestion points: User input provided for fields topic, niche, and platform in SKILL.md.
  • Boundary markers: None explicitly defined in the API request construction.
  • Capability inventory: Limited to HTTPS POST/GET/PATCH requests to vendor domains; no file-system write or subprocess execution capabilities detected.
  • Sanitization: Content generation is handled server-side by the vendor's API.
  • [EXTERNAL_DOWNLOADS]: The documentation provides installation instructions involving a Git repository (github.com/citedy/leads.git) and a package reference for the openskills framework. These resources are owned by the verified vendor 'citedy' and are used for standard skill deployment.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 05:21 PM