mailbox
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted email content from external providers, creating a surface for malicious instructions to influence agent behavior.\n
- Ingestion points: External data enters the context via
list_messages,get_message,search_messages, andget_threadas described inSKILL.md.\n - Boundary markers: The instructions mandate a manual confirmation step from the user before the agent performs sensitive actions such as
delete_messageordelete_thread.\n - Capability inventory: The skill allows for high-impact write operations including
send_message,reply_message, anddelete_messageinSKILL.md.\n - Sanitization: The skill relies on human oversight rather than automated filtering to prevent the execution of malicious instructions found within emails.
Audit Metadata