analytics-observability
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEDATA_EXFILTRATIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill communicates with api.leadmagic.io, which is the official API endpoint for the skill's author. This is expected behavior for an analytics tool and represents intended functionality.
- [CREDENTIALS_UNSAFE]: The skill references the use of a $LEADMAGIC_API_KEY environment variable for authentication. This is a secure and standard practice for handling API keys, avoiding hardcoded secrets.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external analytics endpoints. While this creates a data processing surface, the risk is mitigated as the source is the vendor's official API and the data is structured analytics information.
Audit Metadata