cold-email-spam-lint
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches script updates from the
jmc-hqrepository on GitHub, which is a well-known service. - [COMMAND_EXECUTION]: Executes logical processing by shelling out to a Python script via the Bash tool to analyze email subject and body content.
- [INDIRECT_PROMPT_INJECTION]: Processes untrusted user-provided email content. The risk is significantly mitigated as the processing is performed by a deterministic Python script without LLM involvement, preventing prompt-based subversion of the linter itself.
Audit Metadata