leadmagic-toolkit
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation describes the installation and configuration of the
leadmagic-clipackage. This is a standard setup procedure for the vendor's own command-line utility. - [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/check-output.py) which the agent may execute to verify the structure and presence of required sections in generated deliverables. The script performs local file reading and string matching. - [INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing lead-related data such as names, companies, and domains to generate enrichment workflows and code artifacts.
- Ingestion points: Lead data inputs (name, company, domain) described in
SKILL.mdand processed by the API endpoints. - Capability inventory: The skill leverages a local validation script and provides patterns for API and CLI interactions.
- Sanitization: No specific input sanitization or filtering is defined for the lead data within the provided artifacts.
- Boundary markers: The
templates/output-template.mdprovides a structured format to delimit the agent's output.
Audit Metadata