team-linkedin-profiles
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [DATA_EXFILTRATION]: The skill reads API credentials from
~/.gooseworks/credentials.json. While this involves accessing sensitive data, it is a documented part of the skill's setup and integration with its own service (gooseworks-ai), following standard vendor practices for CLI-based authentication. - [COMMAND_EXECUTION]: The skill uses
python3command-line snippets to parse local JSON files for environment variable configuration (GOOSEWORKS_API_KEY,GOOSEWORKS_API_BASE). These commands are static, localized to the user's home directory, and do not incorporate unvalidated user input into the shell execution. - [COMMAND_EXECUTION]: The skill relies on
curlto make POST requests to$GOOSEWORKS_API_BASE. These requests are directed to the vendor's own infrastructure (api.gooseworks.aiby default) to perform searches via secondary providers (Exa, Hunter, Brand.dev). All external communication is consistent with the skill's stated purpose of business intelligence and team discovery.
Audit Metadata