api-auth-credits
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill documents interactions with the LeadMagic API at api.leadmagic.io. This is a vendor-owned domain used for standard service functionality such as checking credit balances and tracking usage.
- [CREDENTIALS_UNSAFE]: The instructions explicitly advise against logging or echoing the LEADMAGIC_API_KEY. It recommends reading the key from environment variables and rotating it if exposed, which follows security best practices.
- [COMMAND_EXECUTION]: A sample curl command is provided for testing API connectivity. The command uses standard flags and targets the vendor's official API endpoint using a user-provided environment variable for authentication.
Audit Metadata