rstack-bootstrap
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs additional skills from the vendor's official GitHub repository and the AgentMail repository using the
npx skills addcommand to provide extended functionality. - [COMMAND_EXECUTION]: Executes shell commands to detect the runtime environment, manage local configuration files, and generate a maintenance script for registration health checks.
- [DATA_EXFILTRATION]: Facilitates account registration and session management by communicating with the
resolved.shandagentmail.toAPIs. This involves sending the agent's email address and retrieving session tokens and API keys. - [CREDENTIALS_UNSAFE]: Manages sensitive information such as API keys and session tokens by temporarily storing them in the
/tmpdirectory. This data is used to automate account creation and resource registration without human intervention. - [PROMPT_INJECTION]: Processes external data from email messages to extract authentication tokens, creating a surface for indirect instructions.
- Ingestion points: Retrieves message content from the AgentMail API within the token polling phase in
SKILL.md. - Boundary markers: Absent; the skill uses regex to locate specific token patterns within the message body.
- Capability inventory: Uses
curlfor network requests andpython3for string parsing and file writing. - Sanitization: Employs regex to isolate the
tokenparameter, which restricts the processed input to expected alphanumeric characters.
Audit Metadata