agentmail-toolkit
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends installing
agentmail-toolkitandagentmailvia standard package managers (npm, pip). These are official libraries associated with the recognized AgentMail vendor and do not constitute a security risk. - [INDIRECT_PROMPT_INJECTION]: The skill correctly identifies the attack surface presented by processing external email content. It provides proactive security guidance, such as treating email data as untrusted, implementing sanitization, and adhering to the principle of least privilege for the tools that process this data.
Audit Metadata