Lensmor Exhibitor Search

• Risk level: Low
• Analyzed: Apr 1, 2026, 7:55 AM
• Findings: 0
• Version: 1.2.0

Overview

The skill's requirements and runtime instructions are coherent with its stated purpose (calling Lensmor's exhibitor search API) and do not request unrelated credentials or install third-party code.

This skill appears to do what it claims: it will send the company URL or target-audience text you provide to Lensmor's API using the LENSMOR_API_KEY. Before installing or using it, consider: (1) only provide non-sensitive inputs (company URLs and marketing-style audience descriptions are appropriate; do not paste private credentials or internal docs), (2) ensure you trust Lensmor and are comfortable sharing that data with platform.lensmor.com (review their privacy/terms), (3) store the LENSMOR_API_KEY securely and use a scoped/minimum-privilege key if available, (4) rotate/revoke the key if it is exposed, and (5) be aware that the agent can invoke the skill autonomously — if you want manual control, restrict when/where the skill is enabled. If you want further assurance, ask the publisher for official API docs or a provenance statement for the skill source.