Lemlist Automation
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the Composio MCP integration (hosted at rube.app) to interact with the Lemlist API. This is a standard architectural pattern for this platform and does not involve unauthorized data access or malicious code execution.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes lead-specific data such as names, company details, and icebreaker text that may be sourced from external databases or user-supplied files.
- Ingestion points: Lead metadata and personalization variables processed by tools like
LEMLIST_POST_CREATE_LEAD_IN_CAMPAIGNandLEMLIST_POST_ADD_VARIABLES_TO_LEAD. - Boundary markers: None present in the instructions.
- Capability inventory: The skill can create, update, and delete lead records within the Lemlist platform.
- Sanitization: No explicit sanitization of input strings is described before they are passed to the API tools.
Audit Metadata