email-gateway

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/test-provider.sh script is provided for developers to manually test connectivity with email providers using curl. It relies on locally configured environment variables for authentication and target configuration.
  • [EXTERNAL_DOWNLOADS]: The skill references standard Node.js libraries for email functionality, including resend, react-email, and @sendgrid/eventwebhook, which are well-known packages in the ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides templates for transactional and bulk emails that use variable substitution, creating an entry point for external data.
  • Ingestion points: Template variable placeholders in templates/smtp2go-bulk.ts (using the replaceVariables function) and templates/sendgrid-dynamic-template.ts (via dynamic_template_data).
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands are included in the generated email content.
  • Capability inventory: The skill is designed to send network requests via fetch to external email provider APIs (api.resend.com, api.sendgrid.com, api.mailgun.net, api.smtp2go.com).
  • Sanitization: The provided examples do not perform explicit sanitization of the values injected into templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 06:55 AM
Security Audit — agent-trust-hub — email-gateway