company-contact-finder
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements cost-control measures by instructing the agent to obtain explicit user consent before initiating any paid search operations.
- [SAFE]: The skill includes logic to verify the execution environment, preventing the agent from attempting to use non-existent tools when running outside the intended platform.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external people-search APIs which could theoretically contain malicious instructions. However, the skill's functionality is limited to data aggregation and display, posing minimal risk.
- Ingestion points: Results from
fiber_person_search,crustdata_person_search, andpdl_person_searchin SKILL.md. - Boundary markers: Absent.
- Capability inventory: Data extraction and table/JSON formatting. No file system access, network exfiltration of sensitive data, or shell command execution detected.
- Sanitization: Absent.
Audit Metadata