whose-number-is-this

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists of instructional content and procedural guidance for performing phone number research. No executable scripts, malicious commands, or obfuscated content were found.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves processing data from external sources such as search engine results and the output of the phoneinfoga CLI tool.
  • Ingestion points: phoneinfoga scanner output and results from web search tools like google-like-a-spy (SKILL.md).
  • Boundary markers: The skill instructs the agent to record sources and verify findings, though it does not define specific technical delimiters for the external data ingestion.
  • Capability inventory: The skill calls the phoneinfoga CLI tool and various other OSINT-related skills for data collection.
  • Sanitization: Not explicitly implemented in the instructions, but the skill emphasizes validation and confidence grading, which aligns with OSINT best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 08:31 PM
Security Audit — agent-trust-hub — whose-number-is-this