email-template-builder
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a potential surface for indirect prompt injection due to its handling of untrusted data in templates.
- Ingestion points: The
WelcomeEmailandInvoiceEmailtemplates inSKILL.mdingest external properties such asname,confirmUrl, anditems. - Capability inventory: The skill includes logic in
emails/lib/send.tsto render these templates and dispatch them via theresend.emails.sendservice. - Boundary markers: There are no explicit delimiters or instructions provided to the agent or the rendering engine to ignore potentially malicious instructions embedded within the user-supplied data fields.
- Sanitization: While the templates use standard React JSX, which provides escaping for Cross-Site Scripting (XSS), there is no specific sanitization or validation of the content to prevent it from influencing the agent's behavior if the output is re-processed by an AI.
Audit Metadata