score-contacts-with-jev
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill uses
exec()andcompile()inscripts/jev_lib.pyandscripts/test_offline.pyto execute generated Python code locally. This provides a local preview of the lead-scoring logic to ensure parity with the cloud-based Clay workflow. - [COMMAND_EXECUTION]: The
clayCLI andgitcommand are executed viasubprocess.run()in several scripts to manage workflows and perform security audits of local configuration files. - [INDIRECT_PROMPT_INJECTION]: The skill ingests contact data from Clay tables and evaluations are performed by the Jev model. Instructions use backticks as boundary markers to delimit data. The skill possesses capabilities for network operations and command execution. Inputs are truncated to a maximum character length as a sanitization measure.
- [EXTERNAL_DOWNLOADS]: The skill communicates with TypeSafe (api.typesafe.ai) and OpenRouter (openrouter.ai) APIs for scoring inference. These network operations are standard for the skill's intended operation and target well-known service providers.
Audit Metadata