contact-finder-contactout
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Employs python3 for parsing configuration and curl for API requests, which are documented and necessary for functionality.
- [DATA_EXFILTRATION]: Performs network requests to vendor-managed domains (api.gooseworks.ai and api.orth.sh) to fetch enrichment data based on user input.
- [PROMPT_INJECTION]: Potential for indirect prompt injection via external profile content. Ingestion points: API responses containing third-party profile details. Boundary markers: Not specified in the instructions. Capability inventory: Shell execution via curl/python3. Sanitization: No specific sanitization logic is provided in the instruction set.
Audit Metadata