ai-lead-scoring
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill implementation is transparent and adheres to best practices.
- [DATA_EXFILTRATION]: The skill processes lead data (including email addresses) and sends alerts to a user-configured Slack webhook. This behavior is documented and aligns with the skill's primary purpose of alerting sales teams to high-value leads.
- [CREDENTIALS_UNSAFE]: The skill correctly manages credentials using environment variables (e.g., CRM_API_KEY, HUBSPOT_API_KEY, WEBHOOK_SECRET) and avoids hardcoding sensitive tokens in the source code.
- [EXTERNAL_DOWNLOADS]: Dependencies listed in requirements.txt are well-known, standard libraries for data science and API development (e.g., xgboost, pandas, fastapi).
Audit Metadata