skills/reason-machines/marketing-skills/genpark-marketing-email-spamprevent-skill/Gen Agent Trust Hub
genpark-marketing-email-spamprevent-skill
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches skill source code from the vendor's GitHub repository (
alphaparkinc) and installs standard Python dependencies includingrequestsandpython-dotenvfrom the official package registry. - [DATA_EXFILTRATION]: Transmits email subject lines and body text to the vendor's API endpoint (
api.genpark.ai) for the purpose of spam score calculation and deliverability analysis as described in the skill's core functionality. - [PROMPT_INJECTION]: The skill processes untrusted email content provided by users, creating a surface for indirect prompt injection attacks.
- Ingestion points: Email subject and body content are ingested via
analyze_copy,batch_analyze, andtest_newsletter_templatefunctions as seen inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the provided usage examples.
- Capability inventory: The skill scripts have capabilities for network access (via the
requestslibrary to communicate with the vendor API) and local file reading (via theopen()function in template testing). - Sanitization: No specific sanitization, filtering, or validation logic for the ingested email content is documented in the skill instructions.
Audit Metadata