email-enrichment

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes documentation for interacting with the LeadMagic REST API using curl commands. These commands are provided as integration examples for performing email lookups and validations.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill manages authentication via the $LEADMAGIC_API_KEY environment variable, which is a secure method for handling sensitive credentials without hardcoding them. Network communication is directed to the vendor's official endpoints at api.leadmagic.io and mcp.leadmagic.io for its intended service functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data such as names, domains, and profile URLs. The documentation indicates that name fields undergo sanitization (e.g., stripping credentials and emojis) before processing, which mitigates basic injection attempts. While it ingests external data, it does not expose high-risk capabilities like dynamic code execution for the processed output.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 05:47 PM
Security Audit — agent-trust-hub — email-enrichment