people-search

Pass

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill demonstrates how to interact with the LeadMagic API using standard authentication patterns. It correctly references the LEADMAGIC_API_KEY environment variable, ensuring that sensitive credentials are not hardcoded within the instructions.
  • [DATA_EXFILTRATION]: The skill performs network operations via curl to api.leadmagic.io. This domain is the official API endpoint for the skill's author, LeadMagic, and its use is consistent with the stated purpose of performing people searches.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from LeadMagic's API responses, creating a potential surface for indirect prompt injection.
  • Ingestion points: API response data from api.leadmagic.io (referenced in SKILL.md).
  • Boundary markers: None specified.
  • Capability inventory: Network access via curl to fetch B2B data.
  • Sanitization: None specified in the documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 20, 2026, 06:41 AM