email-campaigns
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONOBFUSCATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to install the
resendlibrary from the official NPM registry and clone the project repository from GitHub. These are standard development practices for the intended functionality. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform media optimization tasks usingffmpegand to execute email-sending scripts vianode. These operations are well-documented and align with the skill's purpose of asset preparation and delivery. - [OBFUSCATION]: The skill's HTML templates include a base64-encoded SVG background image. Analysis confirms this is a benign noise texture used for design depth, which is a common practice in modern web and email development.
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection as it is designed to process and interpolate data from various sources into email campaigns.
- Ingestion points: The skill processes user-provided HTML templates (
email.html), local assets in thepublic/directory, and external advertising data retrieved through the suggested Ryze MCP connector (connector.get-ryze.ai/mcp). - Boundary markers: The instructions do not specify explicit delimiters or "ignore embedded instructions" warnings for handling data retrieved from external connectors.
- Capability inventory: The skill has access to the
Bashtool (shell execution) and full file system capabilities viaRead,Write,Edit,Grep, andGlobtools. - Sanitization: No specific sanitization or validation logic is implemented for the data ingested during the email generation process.
Audit Metadata