lead-gen-tool-builder
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill scaffolds a standard React and Node.js project designed for sales intelligence and prospecting tools.
- [EXTERNAL_DOWNLOADS]: The scaffolded project depends on well-known, legitimate libraries from the npm registry such as Express, React, Vite, and Tailwind CSS.
- [COMMAND_EXECUTION]: Instructions provided for the AI agent involve standard development operations, including file system copying (
cp), dependency installation (npm install), and starting the development environment (npm run dev). - [DATA_EXFILTRATION]: The application correctly communicates with documented API endpoints for Explorium, Salesforce, and HubSpot. These network operations are transparently defined and essential to the tool's intended functionality.
- [CREDENTIALS_UNSAFE]: The skill implements secure secret management by relying on local environment variables (
.env). The instructions explicitly guide the user to generate their own credentials, and no hardcoded API keys or private tokens are present in the template source code.
Audit Metadata