company-domain-resolver
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches company match suggestions from Clearbit's public autocomplete endpoint and company favicons from Google's service.- [COMMAND_EXECUTION]: Provides and executes a local Python script (clearbit_resolve.py) to process company lists, perform data normalization, and score match confidence.- [INDIRECT_PROMPT_INJECTION]: The skill processes external company lists from CSV, TSV, or plain text. The script implements string normalization and sanitization, such as removing legal suffixes and special characters, before querying the API, which mitigates the risk of processing malicious instructions embedded in the input data.
Audit Metadata