Leadgenius

This skill broadly claims many integrations but only lists three environment keys — ask the publisher for a clear mapping of which keys are used for which integrations and what exact OAuth scopes or API privileges are required. Before installing or supplying credentials: 1) Prefer least-privilege, scoped API tokens (e.g., write-limited CRM tokens or a dedicated integration user) and avoid administrator-level keys. 2) Request documentation about data flows: where lead data is sent, which third parties see it (LeadGenius API vs. enrichment provider), and how PII is stored/retained. 3) Confirm how local files (CSV) are uploaded and whether the agent will read local paths. 4) If you plan to integrate Slack/Google/Gmail/Zapier, provide tokens only when needed and in test/staging environments first. 5) If possible, review the full SKILL.md (untruncated) or source repo to verify behavior — lack of code makes behavior rely entirely on runtime instructions, so clarity is essential. If you cannot obtain these clarifications, treat the skill as higher risk and avoid providing production credentials or sensitive data.