skills/openfunnel/openfunnel-skills/find-companies-posting-about-specific-things/Gen Agent Trust Hub
find-companies-posting-about-specific-things
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local bash scripts (api.sh and signup.sh) to manage API requests and authentication. This design pattern encapsulates operational logic and prevents credentials from entering the agent's conversational context.
- [EXTERNAL_DOWNLOADS]: The scripts use curl to communicate with the vendor's API endpoint at api.openfunnel.dev. This is a legitimate interaction with the author's infrastructure.
- [DATA_EXFILTRATION]: The skill manages an API key and user ID by storing them in a local .env file. It includes specific instructions for the agent to avoid logging or reading these secrets directly and automatically updates .gitignore to prevent accidental disclosure.
Audit Metadata