The Agent Skills Directory

Local Command Execution: The skill utilizes npx and curl to manage a local emulation service. These tools are used to start the emulator and interact with its REST API at http://localhost:4000. This is standard practice for local development workflows.
Indirect Prompt Injection Surface: The skill is designed to process and store email content, including HTML and text. This creates a potential surface where external data (simulated emails) could contain instructions that an agent might encounter while performing tasks like verification code extraction.
Ingestion points: Untrusted data enters the context via POST /emails and POST /emails/batch requests (documented in SKILL.md), specifically through fields like html, text, and subject.
Boundary markers: The skill uses standard JSON structures for data handling, though it does not explicitly define prompt-level delimiters for the email content itself.
Capability inventory: The skill utilizes Bash for curl and npx operations to manage the local server and query data.
Sanitization: The documentation does not specify sanitization for the content of the simulated emails, as it is intended for high-fidelity emulation of a production API.

resend