spark-recipe-newsletter-cleanup
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
sparkcommand-line tool to perform actions such as listing emails, unsubscribing from mailing lists, and blocking senders. These operations are consistent with the skill's stated purpose of email management. - [DATA_EXPOSURE]: The skill involves reading email threads to review newsletter content. This data access is necessary for the audit functionality and is performed within the context of the email service provider's authorized CLI.
- [PROMPT_INJECTION]: Potential surface for Indirect Prompt Injection exists because the skill processes untrusted email content via
spark thread. However, the skill does not possess high-risk capabilities (like arbitrary network requests or local file system modifications) that could be exploited by malicious email content. Boundary markers and sanitization are handled by the underlying agent platform and thesparktool itself.
Audit Metadata