inbox-placement-monitor
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a helper script for automating seed tests when using Resend as the ESP (
python3 resend.py seed). This command is used for legitimate automation within the skill's defined purpose and operates on user-provided inputs like verified senders and seed addresses. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data (manual exports, reports, and seed-test results). It contains explicit instructions to treat all such data as untrusted per the project's security policy, emphasizing that text within reports should be treated as evidence rather than commands. This follows established sanitization best practices.
- [REMOTE_CODE_EXECUTION]: The skill references a local Python script (
resend.py) for optional automation. This is a local file within the skill's infrastructure, not a dynamic remote download, and is triggered by the user for a specific utility task.
Audit Metadata