The Agent Skills Directory

[SAFE]: The analysis did not detect any malicious patterns, obfuscation, or unauthorized data access. The skill provides legitimate technical documentation for TYPO3 development using modern APIs (PHP 8.2+, TYPO3 13.4).
[INDIRECT_PROMPT_INJECTION]: The skill documents the creation of web forms that ingest untrusted user input via the tx_powermail_pi1 plugin. This is the primary purpose of the extension. Evidence chain: 1. Ingestion points: User-submitted form fields and TypoScript prefill (GP:subject). 2. Boundary markers: Not present (standard for web forms). 3. Capability inventory: Database writes to tx_powermail_domain_model_mail and email notifications via SendMailService. 4. Sanitization: The skill documents built-in validation (InputValidator) and spam protection (SpamShieldValidator), as well as custom validation via PSR-14 events.
[EXTERNAL_DOWNLOADS]: The skill references external resources from well-known and trusted services, including the official TYPO3 package registry (Packagist) for in2code/powermail and Unsplash for placeholder product images. These do not represent a security risk.

typo3-powermail