setup-outreach-campaign-smartlead
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Secure Credential Management\n
- The skill instructs users to provide their
SMARTLEAD_API_KEYvia an environment variable or interactive prompt.\n - It uses a placeholder (
your_api_key_here) in documentation rather than hardcoding sensitive tokens.\n- [SAFE]: Legitimate API Usage\n - All external requests target
https://server.smartlead.ai/api/v1, which is the official endpoint for the Smartlead service.\n - The operations performed (creating campaigns, adding leads, setting schedules) are standard functionalities for the integrated service.\n- [SAFE]: Data Handling and Attack Surface\n
- Ingestion points: The skill reads lead data from local CSV files or upstream skill outputs (e.g.,
company-contact-finder) as defined inSKILL.md.\n - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore embedded commands in the lead data.\n
- Capability inventory: The skill utilizes the
smartlead-apicapability to perform authenticated network requests toserver.smartlead.ai.\n - Sanitization: No explicit data sanitization or validation logic for the lead content is described beyond basic field mapping.
Audit Metadata