email-skill

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses standard, built-in Python libraries (smtplib, email) to perform its stated function. No suspicious third-party dependencies or malicious script execution patterns were found.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts parameters for email content and file attachments that may be derived from untrusted external data.
  • Ingestion points: to_email, subject, body, and attachments arguments in email_sender.py.
  • Boundary markers: Absent. The skill does not implement specific delimiters for email content.
  • Capability inventory: Network communication via smtplib and local file read access via open() in email_sender.py.
  • Sanitization: Absent. The skill relies on the calling agent to ensure inputs are safe.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 07:46 PM
Security Audit — agent-trust-hub — email-skill