skills/ronnythedev/dotnet-clean-architecture-skills/dotnet-email-service-aws-ses/Gen Agent Trust Hub
dotnet-email-service-aws-ses
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for path traversal in the
AwsSesEmailService.csfile. - Ingestion points: The
templateNameparameter inSendTemplatedEmailAsyncis used directly to construct a file path. - Boundary markers: None identified. The code does not validate the
templateNameinput against a whitelist or sanitize it to prevent directory traversal sequences (e.g.,../). - Capability inventory: The service has the capability to read files from the local file system using
File.ReadAllTextAsync. - Sanitization: There is no evidence of path normalization or validation to ensure the requested template resides within the intended
EmailTemplatesdirectory. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for HTML/Template injection during placeholder replacement.
- Ingestion points: The
placeholdersdictionary inSendTemplatedEmailAsyncaccepts arbitrary string values that are interpolated into the HTML body. - Boundary markers: The interpolation uses a
{{key}}syntax, but there are no instructions to escape or sanitize the replacement values. - Capability inventory: The final content is sent as a raw HTML email via
SendHtmlEmailAsync, which uses the AWS SESSimplemessage format. - Sanitization: The implementation uses simple string replacement (
htmlBody.Replace) without HTML encoding. If placeholder values contain malicious HTML or styling, it could be used for phishing or layout manipulation in the recipient's email client.
Audit Metadata