The Agent Skills Directory

[SAFE]: The skill provides legitimate technical documentation for integrating the Brevo (formerly Sendinblue) email service. The instructions and code examples are consistent with the stated purpose and follow security best practices.\n- [EXTERNAL_DOWNLOADS]: The skill uses the official @getbrevo/brevo Node.js package. As Brevo is a well-known and established service, this dependency is appropriate and does not pose a security risk.\n- [CREDENTIALS_UNSAFE]: The code snippets correctly demonstrate the use of environment variables (process.env.BREVO_API_KEY and process.env.BREVO_WEBHOOK_TOKEN) for managing secrets, avoiding the risk of hardcoded credentials.\n- [INDIRECT_PROMPT_INJECTION]: The skill describes the implementation of a webhook handler to process delivery events. While this constitutes a data ingestion surface, the provided example includes a token-based authentication check to verify the source of the data, and the data is used for structured database updates rather than being interpreted as instructions.

brevo-email