Security audit

Company, Email & Lead Enrichment

Security checks for vulnerabilities and agentic risk

Overview

This skill is a clearly described lead-enrichment API helper, but users should understand that queries and some personal data are sent to GoCreative and may trigger small payments.

Install only if you are comfortable sending domains, names, email addresses, and profile identifiers to GoCreative for enrichment, and if small USDC pay-per-call charges are acceptable. Use it only for leads or companies you are authorized to process, and avoid submitting sensitive customer or employee data unless your privacy and compliance requirements allow it.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (7)

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The skill explicitly instructs agents to send lead, email, domain, and profile data to a third-party API, but it does not warn users that potentially sensitive business and personal data will leave the local agent environment. In this context, the omission is security-relevant because users may unknowingly transmit PII, prospect data, or profile identifiers to an external enrichment provider and trigger paid requests automatically.

External Transmission

Medium

Category: Data Exfiltration
Content: ## Tools (live endpoints) | Call | What you get | Price | |---|---|---| | `GET https://api.gocreativeai.com/v1/enrich/company/{domain}` | B2B company enrichment from a domain (firmographics) | ~$0.05 | | `GET https://api.gocreativeai.com/v1/enrich/email/{name-and-domain}` | Find a person's likely **work email** from name + company domain | ~$0.02 | | `GET https://api.gocreativeai.com/v1/bundle/email-360/{email}` | **Email 360**: deliverability validation + provider/domain enrichment | ~$0.15 | | `GET https://api.gocreativeai.com/v1/enrich/domain/{domain}` | Domain intel: DNS + WHOIS + TLS, fused | ~$0.05 |
Confidence: 89% confidence
Finding: This endpoint sends a company domain to an external service for enrichment. While external transmission is the core function of the skill, it still creates a real data-exposure boundary because organizational targets, prospecting activity, and user workflow context are disclosed to a third party.

External Transmission

Medium

Category: Data Exfiltration
Content: | Call | What you get | Price | |---|---|---| | `GET https://api.gocreativeai.com/v1/enrich/company/{domain}` | B2B company enrichment from a domain (firmographics) | ~$0.05 | | `GET https://api.gocreativeai.com/v1/enrich/email/{name-and-domain}` | Find a person's likely **work email** from name + company domain | ~$0.02 | | `GET https://api.gocreativeai.com/v1/bundle/email-360/{email}` | **Email 360**: deliverability validation + provider/domain enrichment | ~$0.15 | | `GET https://api.gocreativeai.com/v1/enrich/domain/{domain}` | Domain intel: DNS + WHOIS + TLS, fused | ~$0.05 | | `GET https://api.gocreativeai.com/v1/enrich/linkedin/{profile}` | LinkedIn profile enrichment | ~$0.05 |
Confidence: 95% confidence
Finding: This endpoint sends a person's name-plus-domain combination to an external API to infer a work email, which can involve personal data and prospecting information. In the skill context, this is more sensitive than generic network access because it processes identifiable contact data without any built-in consent or warning language.

External Transmission

Medium

Category: Data Exfiltration
Content: |---|---|---| | `GET https://api.gocreativeai.com/v1/enrich/company/{domain}` | B2B company enrichment from a domain (firmographics) | ~$0.05 | | `GET https://api.gocreativeai.com/v1/enrich/email/{name-and-domain}` | Find a person's likely **work email** from name + company domain | ~$0.02 | | `GET https://api.gocreativeai.com/v1/bundle/email-360/{email}` | **Email 360**: deliverability validation + provider/domain enrichment | ~$0.15 | | `GET https://api.gocreativeai.com/v1/enrich/domain/{domain}` | Domain intel: DNS + WHOIS + TLS, fused | ~$0.05 | | `GET https://api.gocreativeai.com/v1/enrich/linkedin/{profile}` | LinkedIn profile enrichment | ~$0.05 | | `GET https://api.gocreativeai.com/v1/bundle/company-360/{domain}` | **Company 360**: full domain intelligence bundle | ~$0.15 |
Confidence: 96% confidence
Finding: This endpoint transmits a full email address to a third-party service for validation and enrichment. Email addresses are personal data, so sending them externally without an explicit disclosure or consent checkpoint creates a meaningful privacy and compliance risk.

External Transmission

Medium

Category: Data Exfiltration
Content: | `GET https://api.gocreativeai.com/v1/enrich/company/{domain}` | B2B company enrichment from a domain (firmographics) | ~$0.05 | | `GET https://api.gocreativeai.com/v1/enrich/email/{name-and-domain}` | Find a person's likely **work email** from name + company domain | ~$0.02 | | `GET https://api.gocreativeai.com/v1/bundle/email-360/{email}` | **Email 360**: deliverability validation + provider/domain enrichment | ~$0.15 | | `GET https://api.gocreativeai.com/v1/enrich/domain/{domain}` | Domain intel: DNS + WHOIS + TLS, fused | ~$0.05 | | `GET https://api.gocreativeai.com/v1/enrich/linkedin/{profile}` | LinkedIn profile enrichment | ~$0.05 | | `GET https://api.gocreativeai.com/v1/bundle/company-360/{domain}` | **Company 360**: full domain intelligence bundle | ~$0.15 |
Confidence: 83% confidence
Finding: This endpoint sends a domain to an external service for DNS/WHOIS/TLS enrichment. Domains are often less sensitive than personal identifiers, but they can still reveal investigative targets, internal business interests, or customer research activity to a third party.

External Transmission

Medium

Category: Data Exfiltration
Content: | `GET https://api.gocreativeai.com/v1/enrich/email/{name-and-domain}` | Find a person's likely **work email** from name + company domain | ~$0.02 | | `GET https://api.gocreativeai.com/v1/bundle/email-360/{email}` | **Email 360**: deliverability validation + provider/domain enrichment | ~$0.15 | | `GET https://api.gocreativeai.com/v1/enrich/domain/{domain}` | Domain intel: DNS + WHOIS + TLS, fused | ~$0.05 | | `GET https://api.gocreativeai.com/v1/enrich/linkedin/{profile}` | LinkedIn profile enrichment | ~$0.05 | | `GET https://api.gocreativeai.com/v1/bundle/company-360/{domain}` | **Company 360**: full domain intelligence bundle | ~$0.15 | URL-encode arguments. Email finder example: `/v1/enrich/email/jane-doe-stripe.com`.
Confidence: 95% confidence
Finding: This endpoint sends a LinkedIn profile identifier to an external API for enrichment, which may involve personal profile data and third-party account information. In this skill's lead-generation context, that increases sensitivity because it can be used to profile individuals without clear user-facing notice or consent safeguards.

External Transmission

Medium

Category: Data Exfiltration
Content: | `GET https://api.gocreativeai.com/v1/bundle/email-360/{email}` | **Email 360**: deliverability validation + provider/domain enrichment | ~$0.15 | | `GET https://api.gocreativeai.com/v1/enrich/domain/{domain}` | Domain intel: DNS + WHOIS + TLS, fused | ~$0.05 | | `GET https://api.gocreativeai.com/v1/enrich/linkedin/{profile}` | LinkedIn profile enrichment | ~$0.05 | | `GET https://api.gocreativeai.com/v1/bundle/company-360/{domain}` | **Company 360**: full domain intelligence bundle | ~$0.15 | URL-encode arguments. Email finder example: `/v1/enrich/email/jane-doe-stripe.com`.
Confidence: 87% confidence
Finding: This bundled endpoint sends a domain to a third-party service for broader company intelligence aggregation. Although the transmission is aligned with the skill's stated purpose, it still exposes the target of research and potentially sensitive business-intelligence interests to an external provider without any warning or consent language.

Static analysis

No suspicious patterns detected.