using-email-templates
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Mailtrap SDKs on GitHub for multiple languages (Node.js, Python, PHP, Ruby, Java, .NET). These are well-known vendor resources from a trusted organization and do not pose a security risk.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a mechanism for injecting user-provided data into templates via the
template_variablesfield. This represents a standard attack surface for indirect prompt injection where malicious data in the variables could attempt to influence the agent's interpretation of the email content, but the risk is inherent to template systems and no malicious exploitation logic is present in the skill.
Audit Metadata