email-enrichment
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a standard and documented method for interacting with LeadMagic services, serving as a legitimate bridge for email finding and validation tasks.\n- [CREDENTIALS_UNSAFE]: Credential security is handled correctly by utilizing the LEADMAGIC_API_KEY environment variable and providing explicit warnings to ensure the key is never echoed or exposed.\n- [EXTERNAL_DOWNLOADS]: All network communication is restricted to the vendor's official domains (api.leadmagic.io, mcp.leadmagic.io), which is consistent with the skill's stated purpose and poses no risk of unauthorized data exfiltration.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided identifiers (names, domains, profile URLs) for enrichment.\n
- Ingestion points: Data fields such as first_name, last_name, and profile_url defined in SKILL.md.\n
- Boundary markers: None explicitly mentioned in the skill instructions.\n
- Capability inventory: Network operations via API calls to vendor endpoints.\n
- Sanitization: The instructions specify that input names are sanitized by stripping credentials, emojis, and trailing digits.
Audit Metadata