business-email-template
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to assist users in building structured business email templates. Analysis across all 11 threat categories (including prompt injection, data exfiltration, and remote code execution) revealed no malicious patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied information (business details, email categories, tone) to generate templates. While this creates a theoretical surface for indirect injection, the skill lacks dangerous execution capabilities (no file-system writes, network operations, or dynamic code execution), and its instructions emphasize using placeholders instead of real personal data, effectively mitigating the risk.
- [COMMAND_EXECUTION]: No shell commands or system-level execution patterns were identified. The provided SQL DDL and JSON Schema are static templates for data structure and do not contain executable code.
- [DATA_EXFILTRATION]: There are no network operations or instructions to send sensitive data to external domains. References to external tools like 'Mail Tester' or 'MXToolbox' are presented as advice for manual user verification of email deliverability.
- [OBFUSCATION]: No obfuscation techniques such as Base64, zero-width characters, or homoglyphs were detected in the instructions or example data.
Audit Metadata