email-service-integration
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides legitimate educational and technical content for email service integration. It follows security best practices by recommending the use of environment variables for sensitive credentials and implementing suppression mechanisms to handle bounces and spam complaints.
- [INDIRECT_PROMPT_INJECTION]: The skill defines templates and webhook handlers that process external data.
- Ingestion points: OrderConfirmationEmail component props and webhook request body.
- Boundary markers: Absent.
- Capability inventory: Sending emails via integrated providers.
- Sanitization: Absent (relies on library defaults).
- [EXTERNAL_DOWNLOADS]: The skill references established and widely-used libraries such as @sendgrid/mail, @react-email/components, and postmark. These are standard dependencies for the described functionality.
Audit Metadata