skills/openfunnel/openfunnel-skills/find-icp-companies-with-active-pain-points-and-the-people-involved/Gen Agent Trust Hub
find-icp-companies-with-active-pain-points-and-the-people-involved
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Employs local bash scripts (api.sh and signup.sh) to facilitate communication with the OpenFunnel API and manage session credentials.
- [EXTERNAL_DOWNLOADS]: Connects to the vendor's official API at api.openfunnel.dev to verify credentials, list ICP profiles, and deploy search signals.
- [CREDENTIALS_UNSAFE]: Implements storage for API keys and user IDs in a local .env file, providing instructions to ensure the file is excluded from version control via .gitignore.
- [PROMPT_INJECTION]: Processes data from OpenFunnel API endpoints (signal results, account details) and presents it to the user. Ingestion points: responses from api.openfunnel.dev handled in SKILL.md and api.sh. Boundary markers: absent. Capability inventory: shell execution (api.sh, signup.sh) and file write (.env, .gitignore). Sanitization: not explicitly mentioned for API-returned content.
Audit Metadata