perfex-email
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard development patterns and architectural advice for Perfex CRM. It encourages security best practices, such as using
htmlspecialchars()when rendering user-supplied data in email templates to prevent cross-site scripting (XSS) in email clients. - [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for processing external data (e.g., event notifications and contact names) that are subsequently written to a database and sent via email. While this presents an ingestion surface, the skill explicitly mandates sanitization and uses internal platform models for execution, representing a standard and relatively safe implementation for its intended purpose.
- [PERSISTENCE]: The skill implements an email retry queue using a database table and a cron hook (
after_cron_run). While this involves persistent storage and scheduled execution, it is a standard design pattern for reliable messaging systems rather than a malicious persistence mechanism.
Audit Metadata