email-ops
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to manage email workflows, including drafting, following up, and sending emails.
- [CREDENTIALS_UNSAFE]: While the skill requires sensitive environment variables (
SMTP_SERVER,SMTP_USER,SMTP_PASSWORD), it follows best practices by instructing the user to provide them via environment variables rather than hardcoding them. This is considered safe management of secrets. - [COMMAND_EXECUTION]: The skill uses a shell wrapper (
email-ops.sh) to execute a local Python script (send_email.py). This is a standard pattern for modular AI agent skills and does not involve arbitrary command execution from untrusted sources. - [EXTERNAL_DOWNLOADS]: No external packages or scripts are downloaded; the Python script relies solely on built-in libraries (
smtplib,ssl,argparse).
Audit Metadata