litestar-email
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides instructions for the litestar-email library (v0.4.0) and adheres to security best practices by explicitly instructing users not to hard-code credentials and providing examples of environment-based configuration.\n- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface where untrusted data is processed into emails. It demonstrates mitigation through input sanitization.\n
- Ingestion points: The create_notification function in the example takes Notification data from a JSON body.\n
- Boundary markers: Content is encapsulated within EmailMessage and EmailMultiAlternatives objects.\n
- Capability inventory: The skill uses EmailService.send_message, which performs network operations to send emails via various backends.\n
- Sanitization: The provided example uses html.escape() to sanitize text before embedding it in an HTML alternative body.\n- [EXTERNAL_DOWNLOADS]: References standard Python packages including litestar-email, aiosmtplib, botocore, httpx, and aiohttp. These are well-known dependencies for email and HTTP operations.
Audit Metadata