mail-merge
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill consists entirely of high-level instructions and guidelines for a mail merge task.
- [METADATA_POISONING]: The author field is labeled 'Claude Code', which might be interpreted as an official tag, but the surrounding context correctly attributes the skill to the 'inbharatai' collection.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process external data sources (mail merge templates). While this presents a theoretical surface for indirect prompt injection, the guidelines explicitly recommend validating inputs before processing, which is a standard mitigation.
Audit Metadata