contact-to-email
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the 'deepline' CLI tool using a shell script fetched from 'https://code.deepline.com/api/v2/cli/install'. This is an expected setup step for a tool provided by the vendor 'getaero-io' (operating as deepline).
- [COMMAND_EXECUTION]: The skill documentation includes several examples of 'deepline' CLI commands. These commands are used to process CSV files, perform data enrichment via APIs (Apollo, Crustdata, People Data Labs), and validate emails (LeadMagic). The execution is consistent with the skill's primary purpose of contact enrichment.
- [REMOTE_CODE_EXECUTION]: The skill documentation includes a command that pipes a remote script to bash:
curl -s "https://code.deepline.com/api/v2/cli/install" | bash. While this pattern is often flagged, it is used here to install the official vendor tool required for the skill's functionality and originates from the vendor's own domain.
Audit Metadata