extension-email-raw
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious patterns were detected in the skill instructions or Motoko source code.
- [DATA_EXPOSURE]: The documentation includes a specific warning about the privacy implications of using
toandccfields for multiple users (where recipients see each other's addresses), demonstrating a commitment to security best practices. - [CREDENTIALS_UNSAFE]: The skill references sensitive configuration such as
INTEGRATIONS_GATEWAY_API_KEYbut correctly describes them as platform-injected environment variables rather than hardcoding any secrets. - [EXTERNAL_DOWNLOADS]: Dependencies on
caffeineai-emailare vendor-owned resources managed by the platform's package manager (mops), representing legitimate functionality.
Audit Metadata