email-designer
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
code-blocks/preview-helper.pyuses system commands (open,start, orxdg-open) viasubprocess.runto automatically open generated HTML files in the user's default web browser for previewing design iterations. - [EXTERNAL_DOWNLOADS]: The skill's
code-blocks/deps-checker.pyscript automatically installs official Python packages (plotly,kaleido,pillow,openpyxl) if they are needed for optional features like data visualization, image optimization, or Excel template processing. These are established, widely-used libraries in the Python ecosystem. - [DYNAMIC_EXECUTION]: The
code-blocks/deps-checker.pyscript uses the__import__function to programmatically check for the existence of optional dependencies before attempting to install them. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data from
.emlfiles and.xlsxspreadsheets to automate email generation, which presents a surface for indirect prompt injection. - Ingestion points: Data is ingested through
code-blocks/eml-to-html.py(email extraction) andcode-blocks/excel-template-generator.py(Excel data loading). - Boundary markers: While the skill uses structural HTML comments (
<!-- FIELD: xxx -->) to organize content, it does not explicitly prompt the agent to ignore instructions embedded within the user's data. - Capability inventory: The skill has the capability to write files, open browser windows, and install Python packages using
pip. - Sanitization: The
excel-template-generator.pyscript implements aprocess_markupfunction that constrains supported styles to a specific whitelist (e.g., color spans and bold tags) and sanitizes formatting like newlines.
Audit Metadata