recoup-internal-funnel-valuation-pipeline

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the reportlab library, a standard and well-known Python package used for generating the valuation PDF reports. It also fetches album artwork from Spotify's public CDN (i.scdn.co) and artist metadata from the vendor's own API endpoints.
  • [COMMAND_EXECUTION]: The skill executes local utility scripts (scripts/fetch_catalog.py and scripts/render_valuation_pdf.py) to automate the data collection and report generation process. These scripts are contained within the skill and perform the primary tasks described in the documentation.
  • [DATA_EXFILTRATION]: The skill communicates with the Attio CRM API (api.attio.com) and Recoup's internal APIs (api.recoupable.com) to synchronize lead status and fetch valuation data. These network operations are authenticated using environment-provided keys (ATTIO_API_KEY, RECOUP_API_KEY) and are strictly limited to the skill's documented functional scope.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 03:07 AM