find-marketing-agency
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill adheres to security best practices and does not contain malicious code or patterns.
- [SAFE]: The instructions for handling API keys (vk_*) are secure, utilizing shell wrappers to source credentials from local environment files, ensuring they are not ingested into the agent's context.
- [COMMAND_EXECUTION]: The shell commands are limited to curl requests targeting the documented ServiceGraph API (api.servicegraph.co). This is consistent with the skill's stated functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from a remote service, which represents a potential injection surface; however, the risk is negligible as the skill performs read-only operations and does not possess high-privilege capabilities that could be exploited.
Audit Metadata