agentmail-toolkit
Fail
Audited by Snyk on Feb 15, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt includes insecure examples that hard-code or pass an API key literal (e.g., apiKey: "your-api-key" and client=AgentMail(api_key="your-api-key")), which can lead an agent to embed real secret values verbatim in generated code or commands even though it also mentions the safer env-var pattern.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The toolkit's inbox and message tools (e.g., list_threads, get_thread, get_attachment, get_inbox) allow the agent to fetch and read arbitrary incoming emails and attachments from external senders via the AgentMail API, which are untrusted user-generated sources that could carry indirect prompt injections.
Audit Metadata