rails-action-mailer
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements various email templates that ingest and display untrusted data from users or external sources.
- Ingestion points: User-controlled attributes like name, email, and message body are interpolated into ERB templates across multiple files (e.g.,
examples.md,mailers-views.md). - Boundary markers: The skill utilizes standard Rails ERB tags (
<%= ... %>), which automatically perform HTML escaping by default, mitigating some injection risks. - Capability inventory: The skill allows for network operations (sending emails via SMTP or third-party APIs) and local file writes (storing emails in
tmp/mailsfor development), which could be triggered by processed data. - Sanitization: While default escaping is used, some examples like
simple_format(@message.body)provide basic sanitization for user-provided text content.
Audit Metadata