quickmailio
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage globally using npm to provide the necessary tooling for the integration. - [COMMAND_EXECUTION]: The agent uses shell commands to authenticate with Membrane, create connections, and run actions against the QuickMail.io API.
- [PROMPT_INJECTION]: The skill processes data from QuickMail.io, such as prospect information and email bodies, which are provided by external users. * Ingestion points: Data is entered into the agent context via
membrane action runoutputs. * Boundary markers: No delimiters or ignore-instructions are specified for the external data. * Capability inventory: The agent can manage connections and execute arbitrary actions via the CLI. * Sanitization: The skill does not include steps to sanitize or validate the external data before processing.
Audit Metadata