leads-researcher
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes legitimate requests to well-known B2B data providers (Clearbit, Hunter.io) to fetch company and lead information. These connections are standard for the skill's documented purpose.
- [CREDENTIALS_UNSAFE]: The skill follows security best practices by using environment variables (
process.env.CLEARBIT_API_KEY,process.env.HUNTER_API_KEY) for authentication rather than hardcoding sensitive credentials. - [COMMAND_EXECUTION]: No suspicious shell command execution was detected. The use of
bunxin the README is a standard installation instruction for the platform. - [INDIRECT_PROMPT_INJECTION]: The skill processes company names and domains to perform research. While it ingests external data from APIs, the workflow is focused on structured data retrieval for sales research and does not present a high-risk surface for prompt injection.
Audit Metadata