busa-email
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: No exfiltration detected. IMAP and SMTP credentials are managed via a secure vault and referenced by names, ensuring sensitive values never reach the browser or logs. Network operations are restricted to established IMAP/SMTP servers and the Busabase API.
- [SAFE]: The skill maintains a strict boundary between the untrusted web interface and the trusted skill process. All mailbox-modifying actions are gated by human review of materialized decisions, and the AirApp is restricted from performing side effects.
- [INDIRECT_PROMPT_INJECTION]: The skill effectively manages the attack surface inherent in processing untrusted email data. It uses script-stripping sanitization, sandboxed HTML rendering, and mandatory manual approval for all side effects to ensure that instructions embedded in emails cannot bypass the safety gate.
- [SAFE]: Protection against path traversal is implemented for email attachments by normalizing filenames before they are saved to the storage system.
Audit Metadata