people-search
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates how to interact with the LeadMagic API using standard authentication patterns. It correctly references the
LEADMAGIC_API_KEYenvironment variable, ensuring that sensitive credentials are not hardcoded within the instructions. - [DATA_EXFILTRATION]: The skill performs network operations via
curltoapi.leadmagic.io. This domain is the official API endpoint for the skill's author, LeadMagic, and its use is consistent with the stated purpose of performing people searches. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from LeadMagic's API responses, creating a potential surface for indirect prompt injection.
- Ingestion points: API response data from
api.leadmagic.io(referenced inSKILL.md). - Boundary markers: None specified.
- Capability inventory: Network access via
curlto fetch B2B data. - Sanitization: None specified in the documentation.
Audit Metadata