email-html-mjml
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx mjmlto compile MJML source files into production-ready HTML. This is a standard and expected operation for the primary purpose of the skill. - [EXTERNAL_DOWNLOADS]: The skill fetches the
mjmlpackage from the official NPM registry and utilizes external assets such as Google Fonts and official CDNs (e.g., mj.am) for placeholder images and icons. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided content and branding requirements to generate email templates. \n
- Ingestion points: User instructions and brand content provided in the conversation context (SKILL.md). \n
- Boundary markers: None explicitly defined for user-supplied strings within the generated code. \n
- Capability inventory: Executes
npx mjmlvia subprocess for compilation (compilation.md). \n - Sanitization: No specific sanitization or escaping rules are provided for user-supplied text interpolated into templates.
Audit Metadata