email-enrichment
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes documentation for interacting with the LeadMagic REST API using
curlcommands. These commands are provided as integration examples for performing email lookups and validations. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill manages authentication via the
$LEADMAGIC_API_KEYenvironment variable, which is a secure method for handling sensitive credentials without hardcoding them. Network communication is directed to the vendor's official endpoints atapi.leadmagic.ioandmcp.leadmagic.iofor its intended service functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data such as names, domains, and profile URLs. The documentation indicates that name fields undergo sanitization (e.g., stripping credentials and emojis) before processing, which mitigates basic injection attempts. While it ingests external data, it does not expose high-risk capabilities like dynamic code execution for the processed output.
Audit Metadata