build-lead-capture-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to interact with the official Linkbreakers API (
api.linkbreakers.com). All tool definitions and API calls align with the stated purpose of building marketing workflows and lead capture forms. - [SAFE]: No hardcoded credentials or sensitive data exposure were detected. The skill uses standard placeholders for authorization tokens.
- [SAFE]: The instructions do not contain prompt injections, obfuscation, or attempts to bypass safety filters. The provided bash examples are for standard API interaction rather than remote script execution.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data by reading workflow configurations from the Linkbreakers API. This provides a potential surface for indirect prompt injection if the API responses were to contain malicious instructions. However, the risk is mitigated by the skill's specific use case and standard agent guardrails, and no exploitation logic is present.
Audit Metadata