email-skill
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard, built-in Python libraries (
smtplib,email) to perform its stated function. No suspicious third-party dependencies or malicious script execution patterns were found. - [INDIRECT_PROMPT_INJECTION]: The skill accepts parameters for email content and file attachments that may be derived from untrusted external data.
- Ingestion points:
to_email,subject,body, andattachmentsarguments inemail_sender.py. - Boundary markers: Absent. The skill does not implement specific delimiters for email content.
- Capability inventory: Network communication via
smtpliband local file read access viaopen()inemail_sender.py. - Sanitization: Absent. The skill relies on the calling agent to ensure inputs are safe.
Audit Metadata