find-email-by-name
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses
python3 -cto parse and extract the API key and base URL from~/.gooseworks/credentials.json. This is a standard method for environment setup and credential retrieval for the vendor's own services. - [EXTERNAL_DOWNLOADS]: References
npxcommands for user authentication and skill installation. These operations use the standard Node.js package runner to interact with the Gooseworks ecosystem. - [DATA_EXFILTRATION]: Sends data to
api.gooseworks.aivia POST requests. As this domain belongs to the skill's author (gooseworks-ai), this is categorized as functional behavior for the proxy service rather than exfiltration.
Audit Metadata