leadmagic-bulk-enrichment
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Includes a Python validation script (
scripts/check-output.py) that uses standard library modules (re,sys,pathlib) to verify that markdown files contain required sections and terms. This script operates locally and does not perform network or privileged operations. - [SAFE]: No sensitive data exposure, prompt injection, or obfuscation techniques were found. All external references and dependencies are local to the skill or point to other LeadMagic-related documentation.
- [PROMPT_INJECTION]: Analyzed the skill for indirect prompt injection surfaces (Category 8):
- Ingestion points: Processes user-provided CSV files as described in Phase 1 and the Batch Pipeline Spec.
- Boundary markers: The skill does not explicitly define delimiters for separating untrusted CSV data from agent instructions.
- Capability inventory: The skill utilizes Python script execution for validation and general file handling for CSV processing.
- Sanitization: No explicit sanitization or escaping mechanisms for CSV content are documented.
Audit Metadata