sales-builderall

Pass

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill instructions or reference materials.
  • [COMMAND_EXECUTION]: The skill mentions a command to install a related skill (npx skills add sales-skills/sales --skill sales-do -a claude-code). This targets the same vendor (sales-skills) and is consistent with the skill's purpose as a platform guide.
  • [CREDENTIALS_UNSAFE]: The skill correctly uses placeholders (YOUR_TOKEN, <TOKEN>, <LIST_UID>) for sensitive information in its API recipes and provides explicit guidance on treating the API URL as a secret and rotating tokens if leaked.
  • [EXTERNAL_DOWNLOADS]: The Python code recipes utilize the standard requests library for API communication.
  • [DATA_EXPOSURE]: The skill documents the MailingBoss API, which uses a token-in-URL authentication scheme. The documentation accurately reflects the platform's third-party API structure and warns the user about the associated risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 19, 2026, 04:16 PM
Security Audit — agent-trust-hub — sales-builderall