israeli-email-sequences
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the Hebcal API (hebcal.com) for Jewish holiday date resolution. This is a well-known service for this specific use case and does not contribute to a negative verdict.
- [COMMAND_EXECUTION]: A Python script
scripts/email_validator.pyis provided for structural validation of email HTML. The script uses only standard libraries (argparse,re,sys) and performs no dangerous operations such as network calls, sensitive file access, or subprocess execution. - [OBFUSCATION]: The validator script uses Unicode escape sequences (e.g.,
\u05e4\u05e8\u05e1\u05d5\u05de\u05ea) for Hebrew strings. This is standard practice for handling non-ASCII characters in Python source code and is not a form of malicious obfuscation, as it represents the Hebrew word 'Advertisement' required by Israeli law. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it processes user-provided HTML email templates. However, the processing is limited to structural regex checks within a local script that lacks dangerous sinks (no network, no file writes), making the risk negligible.
- [METADATA_POISONING]: The skill metadata and changelogs are consistent with the stated purpose of providing email marketing compliance guidelines for the Israeli market.
Audit Metadata