prospeo-search-api
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the integration with the Prospeo Search Person API. All provided code snippets and patterns are consistent with its stated purpose of lead generation and search automation.
- [EXTERNAL_DOWNLOADS]: The skill identifies the official Prospeo API endpoint (
https://api.prospeo.io/search-person) for search operations. No unauthorized or suspicious external connections were detected. - [CREDENTIALS_UNSAFE]: The documentation correctly identifies the need for authentication via the
X-KEYheader and appropriately referencesprocess.env.PROSPEO_API_KEYfor secret management. It uses a generic placeholder (your_api_key_here) rather than hardcoding actual credentials. - [COMMAND_EXECUTION]: The skill references local development paths (e.g.,
Desktop/Cursor Testing/src/services/prospeoSearch.ts) to inform the agent of the existing implementation context, but does not contain commands to execute or modify files maliciously. - [DATA_EXFILTRATION]: While the skill defines how to fetch contact details (emails, phone numbers) from the Prospeo database, this behavior is the primary intended function of the lead generation tool and is not indicative of unauthorized exfiltration of user data.
Audit Metadata