mailtrap-setting-up-sending-domain
Warn
Audited by Snyk on Aug 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to call Mailtrap's runtime API endpoints (e.g., https://mailtrap.io/api/accounts/$MAILTRAP_ACCOUNT_ID/sending_domains and https://mailtrap.io/api/accounts/$MAILTRAP_ACCOUNT_ID/sending_domains/{sending_domain_id}), which return dns_records that directly determine the agent's configuration actions, so I flag these as runtime external dependencies that control the agent's instructions.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata