agentmail
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: Accesses the sensitive file path
credentials/secrets/store.envto retrieve theAGENTMAIL_API_KEY, which is used locally for service authentication. - [EXTERNAL_DOWNLOADS]: Recommends the installation of external dependencies including the
agentmail-cliandagentmailpackages from public NPM and PyPI registries. - [PROMPT_INJECTION]: The skill processes inbound emails from untrusted sources, creating a potential surface for indirect prompt injection.
- Ingestion points: Email content is retrieved in
references/recipes.mdusing theagentmail inboxes:threads getcommand. - Boundary markers: The recipes employ
timestamp,subject, andsenderfiltering to isolate specific, expected communications. - Capability inventory: The skill relies on subprocess execution of the
agentmailCLI,jq, andgrep. - Sanitization: Safety guidelines in
SKILL.mdadvise extracting only specific data such as codes or links and warn against acting on unsolicited messages.
Audit Metadata