apollo-lead-finder
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill implements several safety measures:
- User Approval Requirement: The skill instructions explicitly forbid automated database writes or credit consumption without user confirmation. The agent is instructed not to use the
--yesflag on first runs. - Credential Management: Sensitive keys are handled via environment variables, following standard security practices. No hardcoded secrets were found in the code or configuration files.
- Trusted Communications: Network requests are directed to a vendor-provided proxy (app.gooseworks.ai) and the user's own Supabase instance. No unauthorized data exfiltration patterns were identified.
- No Untrusted Code: The implementation relies on the Python standard library for network operations and does not download or execute external scripts.
- [PROMPT_INJECTION]: No instructions attempting to override agent behavior, bypass safety filters, or extract system prompts were detected.
- [DATA_EXFILTRATION]: Analysis of the network operations confirms that data is only transmitted between the official Apollo.io proxy and the user's database. There is no evidence of data being sent to malicious or unknown external domains.
Audit Metadata