inbox-triage

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill enforces a strict 'Human-in-the-loop' policy for all communications. It mandates that every reply must be explicitly approved by the user as 'exact-text' before the conversation.reply tool is executed, preventing the agent from sending unauthorized or malicious content.
  • [SAFE]: The skill addresses the attack surface of indirect prompt injection originating from inbound prospect replies.
  • Ingestion points: External data is ingested through the conversation.read operation in SKILL.md.
  • Boundary markers: The process defers to the approval-boundaries related skill to maintain safety constraints.
  • Capability inventory: The skill utilizes the conversation.reply (message writing) and conversation.classify (status updates) tools.
  • Sanitization: Instructions require the agent to minimize quotes from external communications and mandate human verification of all generated drafts before execution.
  • [SAFE]: The skill implements safety boundaries for permanent actions, such as recording 'Do-Not-Contact' dispositions, which require explicit human confirmation to prevent accidental or malicious blacklisting of contacts.
  • [SAFE]: The documentation explicitly identifies and warns against high-risk failure modes, including batch-sending drafts, silent channel switching, and loss of thread context, reinforcing a policy of transparency and manual oversight.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 06:47 PM
Security Audit — agent-trust-hub — inbox-triage