send-email
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
curlcommand within a Bash environment to transmit email data to a remote server. This is the core mechanism for its intended functionality. - [DATA_EXFILTRATION]: The skill is designed to send user-provided data, including email recipients, subjects, and message bodies, to an external n8n webhook. While this involves data transmission to a remote endpoint, it is the primary stated purpose of the skill and uses a user-defined host.
- [EXTERNAL_DOWNLOADS]: The skill interacts with an external n8n service via a webhook endpoint. The documentation provides a placeholder URL and correctly advises the implementation of header-based authentication using a secret variable to secure the connection.
- [PROMPT_INJECTION]: The skill processes potentially untrusted data in the email body and subject fields, creating a surface for indirect prompt injection. The author has mitigated this risk by including clear warnings to the agent and user to confirm all outgoing messages, especially those derived from third-party or scraped content.
Audit Metadata