tomba
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the 'orth' CLI tool to interact with the Tomba API. This is a standard mechanism for skills from this vendor and is considered safe.
- [SAFE]: No obfuscation, data exfiltration of local secrets, or unauthorized remote code execution patterns were identified.
- [SAFE]: The skill's primary function is to retrieve publicly available professional contact information, which aligns with its stated purpose and legitimate use cases.
- [PROMPT_INJECTION]: While the skill processes external domains and URLs (potential indirect prompt injection surfaces), it uses structured API parameters and shows no signs of malicious logic.
Audit Metadata