expose-agentkit-mcp
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates a vulnerability surface by processing untrusted external data (emails) and providing the agent with capabilities to perform actions like creating calendar events.
- Ingestion points: Data enters the agent's context through the
gmail_fetch_mailstool in the ReAct agent invocation loop withinSKILL.md. - Boundary markers: No explicit delimiters or instructions are provided to the model to ignore potential malicious content embedded within the fetched emails.
- Capability inventory: The skill possesses capabilities to execute network operations via MCP and modify state through the
googlecalendar_create_eventtool. - Sanitization: There is no evidence of content sanitization or validation of the email data before it is processed by the language model.
- [EXTERNAL_DOWNLOADS]: The skill installs necessary dependencies from the official Python package registry.
- Packages: The instructions include the installation of
scalekit-sdk-python,langgraph,langchain,langchain-openai,langchain-mcp-adapters, andpython-dotenv. - Sources: These are recognized libraries from the AI ecosystem and the vendor's official SDK.
Audit Metadata