mailpit-integration
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains instructional content and boilerplate code for setting up a local email testing environment. It correctly references containerized services via .NET Aspire and provides configuration templates using best practices like environment variables.- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates integration testing patterns that parse email content to extract and follow links. This identifies an ingestion point for untrusted data processed by the test client, although it is presented within a controlled testing context. 1. Ingestion points:
MailpitMessage.HtmlBodyin integration test code. 2. Boundary markers: None. 3. Capability inventory:HttpClientusage for network requests. 4. Sanitization: Regex extraction without domain verification.- [EXTERNAL_DOWNLOADS]: The skill references theaxllent/mailpitcontainer image and theMailKitNuGet package. These are established tools for development and testing and are referenced neutrally as part of the setup instructions.
Audit Metadata