sendgrid
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs
curlandjqto interact with API endpoints and process data. It also references a platform-specific troubleshooting tool,zero, to verify environment configurations. - [EXTERNAL_DOWNLOADS]: Network operations are conducted with
api.sendgrid.com. As this is a well-known service providing the core functionality of the skill, it is documented as a legitimate and expected destination. - [PROMPT_INJECTION]: The skill processes untrusted input such as recipient information and email bodies, which represents a surface for indirect prompt injection.
- Ingestion points: User-supplied email content and marketing contact data.
- Boundary markers: None implemented in the provided workflows.
- Capability inventory: Writing to the local filesystem (
/tmp/sendgrid_request.json) and making network requests viacurl. - Sanitization: No explicit validation or filtering of the user-provided data is defined.
Audit Metadata