find-email-by-name

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Uses python3 -c to parse and extract the API key and base URL from ~/.gooseworks/credentials.json. This is a standard method for environment setup and credential retrieval for the vendor's own services.
  • [EXTERNAL_DOWNLOADS]: References npx commands for user authentication and skill installation. These operations use the standard Node.js package runner to interact with the Gooseworks ecosystem.
  • [DATA_EXFILTRATION]: Sends data to api.gooseworks.ai via POST requests. As this domain belongs to the skill's author (gooseworks-ai), this is categorized as functional behavior for the proxy service rather than exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 01:05 PM