sales-builderall
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill instructions or reference materials.
- [COMMAND_EXECUTION]: The skill mentions a command to install a related skill (
npx skills add sales-skills/sales --skill sales-do -a claude-code). This targets the same vendor (sales-skills) and is consistent with the skill's purpose as a platform guide. - [CREDENTIALS_UNSAFE]: The skill correctly uses placeholders (
YOUR_TOKEN,<TOKEN>,<LIST_UID>) for sensitive information in its API recipes and provides explicit guidance on treating the API URL as a secret and rotating tokens if leaked. - [EXTERNAL_DOWNLOADS]: The Python code recipes utilize the standard
requestslibrary for API communication. - [DATA_EXPOSURE]: The skill documents the MailingBoss API, which uses a token-in-URL authentication scheme. The documentation accurately reflects the platform's third-party API structure and warns the user about the associated risks.
Audit Metadata