lead-hand-skill
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
shell_execfor environment detection. It executespython -c "import platform; print(platform.system())"to adapt file paths and cleanup commands for Windows or Unix-like systems.- [EXTERNAL_DOWNLOADS]: The skill usesweb_searchandweb_fetchto retrieve lead information from public sources. This is the primary function of the tool and no unauthorized downloads of executable code were found.- [DATA_EXPOSURE]: Information is saved to local files likeleads_database.jsonand generated reports. The skill contains explicit instructions to prevent data exfiltration and respect privacy.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted data from the web.\n - Ingestion points: Data enters via
web_fetchin Phase 3 and 4 (HAND.toml).\n - Boundary markers: None identified; external content is processed without specific delimiters.\n
- Capability inventory: Includes
shell_exec,file_write, andschedule_create(HAND.toml).\n - Sanitization: No explicit sanitization or validation of fetched strings is mentioned before they are stored or processed.
Audit Metadata