verify-email
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
python3commands to read and parse the user's local credentials from~/.gooseworks/credentials.json. This is a standard procedure for retrieving API keys in this environment. - [COMMAND_EXECUTION]: The skill uses
curlto make POST requests to the API gatewayapi.gooseworks.ai. These requests are used to proxy calls to email verification services (Hunter/Tomba) and are aligned with the skill's primary function. - [CREDENTIALS_SAFE]: The skill documentation includes examples using environment variables (
$GOOSEWORKS_API_KEY) and references a local path for credentials storage (~/.gooseworks/credentials.json). No actual secrets or sensitive tokens are hardcoded in the skill files.
Audit Metadata