The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a curl example for interacting with the LeadMagic API. This is a standard documentation practice and uses a shell variable ($LEADMAGIC_API_KEY) for authentication, which is a safe way to handle credentials without hardcoding them.
[EXTERNAL_DOWNLOADS]: The skill connects to api.leadmagic.io for its core functionality. As this is the official API endpoint for the skill's vendor (LeadMagic), these network operations are considered safe and expected.
[CREDENTIALS_UNSAFE]: No hardcoded API keys or secrets were found. The documentation correctly instructs users to use environment variables for sensitive tokens.
[PROMPT_INJECTION]: The instructions focus entirely on technical API usage and workflow guidance. There are no attempts to override agent safety filters or manipulate the underlying LLM behavior.
[DATA_EXFILTRATION]: There is no evidence of the skill attempting to access sensitive local files (like SSH keys or AWS credentials) or sending user data to unauthorized third-party domains.

job-search