leadmagic-toolkit

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation describes the installation and configuration of the leadmagic-cli package. This is a standard setup procedure for the vendor's own command-line utility.
  • [COMMAND_EXECUTION]: The skill includes a Python script (scripts/check-output.py) which the agent may execute to verify the structure and presence of required sections in generated deliverables. The script performs local file reading and string matching.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing lead-related data such as names, companies, and domains to generate enrichment workflows and code artifacts.
  • Ingestion points: Lead data inputs (name, company, domain) described in SKILL.md and processed by the API endpoints.
  • Capability inventory: The skill leverages a local validation script and provides patterns for API and CLI interactions.
  • Sanitization: No specific input sanitization or filtering is defined for the lead data within the provided artifacts.
  • Boundary markers: The templates/output-template.md provides a structured format to delimit the agent's output.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 12:53 PM