14-email-marketing
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No executable code, scripts, or binary files are included in this skill. It consists entirely of markdown documentation and templates.
- [EXTERNAL_DOWNLOADS]: Mentions well-known and trusted marketing services including Brevo, Mailchimp, and Kit (ConvertKit) for implementation. It also references MXToolbox for verifying DNS records (SPF, DKIM, DMARC), which is a standard industry practice for email security.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided business data (product descriptions, audience targets) to generate marketing sequences. While it lacks explicit boundary markers for this data, its functionality is limited to generating static markdown text, posing no technical risk to the host environment.
- [DATA_EXPOSURE]: No hardcoded credentials or sensitive file paths were detected. The skill correctly instructs users to manage their own API keys and domain settings within the recommended third-party platforms.
- [METADATA_POISONING]: The metadata fields (name, description, version, triggers) accurately reflect the content and purpose of the skill.
Audit Metadata