hunter
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a well-defined wrapper for email and company enrichment services. It uses structured API calls via the
orthutility, which is consistent with the developer's ecosystem. - [DATA_EXPOSURE]: The skill processes email addresses and domain names to perform its intended tasks. This data is sent to the Hunter API endpoints for enrichment. No sensitive local files or credentials are accessed or exposed.
- [COMMAND_EXECUTION]: All execution patterns are restricted to the
orth api runcommand format. There is no evidence of shell injection or unauthorized system-level command execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external API (Hunter). While this data is reflected in the agent's context, the skill does not exhibit any capabilities that would allow this data to be used for malicious escalation.
Audit Metadata