email-gateway
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/test-provider.shscript is provided for developers to manually test connectivity with email providers usingcurl. It relies on locally configured environment variables for authentication and target configuration. - [EXTERNAL_DOWNLOADS]: The skill references standard Node.js libraries for email functionality, including
resend,react-email, and@sendgrid/eventwebhook, which are well-known packages in the ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill provides templates for transactional and bulk emails that use variable substitution, creating an entry point for external data.
- Ingestion points: Template variable placeholders in
templates/smtp2go-bulk.ts(using thereplaceVariablesfunction) andtemplates/sendgrid-dynamic-template.ts(viadynamic_template_data). - Boundary markers: No specific delimiters or instructions to ignore embedded commands are included in the generated email content.
- Capability inventory: The skill is designed to send network requests via
fetchto external email provider APIs (api.resend.com, api.sendgrid.com, api.mailgun.net, api.smtp2go.com). - Sanitization: The provided examples do not perform explicit sanitization of the values injected into templates.
Audit Metadata