contact-enrichment
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The documentation provides a Python script template for polling asynchronous job results. This snippet uses the
requestslibrary to monitor HTTP status codes and retrieve data once a job is complete. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill transmits contact identifiers such as names, company domains, and LinkedIn profile URLs to external enrichment providers (ColdIQ, Prospeo, Findymail, FullEnrich) to fetch associated emails and phone numbers. This transmission is central to the skill's primary function.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided contact lists and company domains that are interpolated into API requests.
- Ingestion points: User-supplied lists of individuals and company domains.
- Boundary markers: None explicitly defined in the instructional text.
- Capability inventory: Performs network operations via marketplace APIs and execution of Python code for job polling.
- Sanitization: The skill does not specify input validation or sanitization for the contact data before it is sent to the marketplace endpoints.
Audit Metadata