SMTP
Warn
Audited by Snyk on Apr 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent to query and interpret data from configured SMTP servers and public DNS/authoritative nameservers (see "External Endpoints" and steps in send-flow.md, diagnostic-playbook.md, and deliverability.md that require reading EHLO output, SMTP responses, headers, and DNS/SPF/DKIM/DMARC records), which are untrusted third-party sources whose content can influence send decisions and tool use.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata