email-lifecycle-lifecycle-audit
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
dig TXTshell command to perform DNS lookups for verifying SPF, DKIM, and DMARC records during the deliverability audit process. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, creating an attack surface for indirect prompt injection.
- Ingestion points: Processes external content provided by the user, including tool exports, screenshots, and Postmaster charts.
- Boundary markers: The instructions do not define specific delimiters or security guardrails for isolating these external inputs from the agent's instruction set.
- Capability inventory: The skill possesses the capability to execute shell commands (
dig) and perform file system writes (writing reports tolifecycle/deliverability/). - Sanitization: There is no evidence of sanitization, filtering, or validation routines for the content extracted from external exports or files.
Audit Metadata