apollo-core-workflow-b
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill is a legitimate tool for integrating with the Apollo.io platform. All network operations target the official API of a well-known service (Apollo.io).
- [CREDENTIALS_UNSAFE]: The skill correctly uses environment variables (
process.env.APOLLO_API_KEY) to manage authentication secrets, avoiding hardcoded keys or insecure storage. - [INDIRECT_PROMPT_INJECTION]: The skill provides an interface for processing lead data and email templates, representing a surface for external data ingestion. As this is the primary functionality for an outreach tool, it is consistent with the intended use case.
- Ingestion points: Lead arrays processed in
SKILL.mdandreferences/implementation-guide.md. - Boundary markers: None identified in the provided code snippets.
- Capability inventory: Network operations limited to interacting with the Apollo.io API endpoints.
- Sanitization: Not demonstrated in the implementation examples, though expected at the application level.
Audit Metadata