waterfall-enrich-contacts
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with the HubSpot API and several external enrichment services (FullEnrich, Apollo, Hunter, and Dropcontact). These are established B2B technology providers used for the skill's primary documented purpose.
- [COMMAND_EXECUTION]: Employs dynamic module loading via
importlib.import_moduleinscripts/providers/__init__.pyto switch between provider adapters. This implementation is safe as it validates the provider name against a hardcoded whitelist before attempting to load the corresponding local module. - [DATA_EXFILTRATION]: Transmits contact identity data (names and domains) to external APIs. This is the intended functionality of the enrichment skill, and it includes explicit user confirmation prompts and cost-capping mechanisms to prevent unauthorized or accidental data transfer.
- [SAFE]: Secret management (API keys and access tokens) is handled correctly using environment variables and
.envfiles, avoiding hardcoded credentials within the source code.
Audit Metadata