transactional
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and secure guidelines for transactional email management.
- [INFRASTRUCTURE]: Correctly recommends separating transactional and marketing streams using dedicated subdomains (e.g.,
tx.yourdomain.com) to protect sender reputation. - [SECURITY]: Implements industry-standard security practices for One-Time Passwords (OTPs) and password resets, including short expiry times (10-60 minutes), cryptographic randomness, and the prevention of tokens in subject lines to avoid log exposure.
- [COMPLIANCE]: Accurately details the distinction between transactional and marketing content to maintain legal exemptions (CAN-SPAM/GDPR) while warning against aggressive promotional content in system emails.
- [DATA_PRIVACY]: Correctly advises against including full PII or credit card numbers in receipts (limiting to last 4 digits only).
Audit Metadata