email-forensics
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a set of instructional examples for using a Python library named
email_forensics. It defines workflows for analyzing email artifacts like PST/OST files, headers, and attachments for forensic purposes. - [DATA_EXPOSURE]: While the skill interacts with sensitive forensic evidence (mailbox files in
/evidence/), it follows standard forensic practices of reading from a defined evidence directory and writing reports to that same directory. No evidence of unauthorized exfiltration or hardcoded credentials was found. - [REMOTE_CODE_EXECUTION]: The skill does not perform any remote code execution. It mentions integration with external APIs like VirusTotal and Google Safe Browsing via configuration, which is standard for threat intelligence lookups in forensic tools.
- [PROMPT_INJECTION]: No prompt injection or behavior override patterns were detected in the instructions.
- [COMMAND_EXECUTION]: The skill uses Python library calls and does not invoke arbitrary shell commands.
Audit Metadata