smartlead-inbox-manager
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides scripts that are executed using shell commands via
npx tsxto manage Smartlead inbox configurations.\n- [EXTERNAL_DOWNLOADS]: The skill usesnpx tsxwhich may download thetsxpackage from the public npm registry during execution if it is not available locally.\n- [DATA_EXFILTRATION]: The skill reads identity information from environment variables and inbox data from the Smartlead API, and transmits configuration updates toserver.smartlead.ai. This is legitimate behavior for the skill's purpose.\n- [PROMPT_INJECTION]: The skill implements features that read local files via the--ids-from-csvand--template-fileflags, creating a surface for indirect prompt injection where a malicious prompt could trick the agent into accessing sensitive files.\n - Ingestion points: Local file access in
scripts/_lib.tsandscripts/set-signatures.ts.\n - Boundary markers: None present to distinguish file content from instruction context.\n
- Capability inventory: Local file reading (
fs.readFileSync), file writing (fs.writeFileSync), and network requests (fetch) to the Smartlead API.\n - Sanitization: None; file contents are processed as raw strings or parsed as CSV.
Audit Metadata