phone-verification-waterfall-skill
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate business automation for lead enrichment. All logic is consistent with the stated purpose of managing a sales lead pipeline. It leverages official platform tools to interact with well-known third-party services like HubSpot, Apollo, and Clay.
- [DATA_EXFILTRATION]: Network operations are directed at authorized, well-known service providers required for enrichment. The skill handles sensitive identifiers and API keys through secure practices such as shell environment variables.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes data from HubSpot CRM. While this provides a surface for untrusted data ingestion, the skill utilizes structured SQL queries and specific MCP tool parameters, reducing the risk of prompt manipulation from external content.
- [DYNAMIX_EXECUTION]: No evidence of dynamic code generation or unsafe deserialization was found. Shell snippets provided in documentation are intended for manual user validation and are not executed automatically during skill runtime.
Audit Metadata