email-template-builder
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns, data exfiltration attempts, or unauthorized persistence mechanisms were identified. The skill provides high-quality boilerplate for production email infrastructure.- [COMMAND_EXECUTION]: The documentation includes standard development commands such as 'npx email dev' and 'npx tsx', which are used for local template previewing and testing. These are typical for the React/Node.js ecosystem.- [EXTERNAL_DOWNLOADS]: The skill references font assets from Google's official Font CDN (fonts.gstatic.com). This is a well-known and trusted service used to ensure consistent typography across email clients.- [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface (Category 8) by processing untrusted data like user names and invoice details. * Ingestion points: Template props in 'welcome.tsx' and 'invoice.tsx'. * Boundary markers: Not explicitly used, relying on standard React interpolation. * Capability inventory: None; the templates are rendered to static HTML. * Sanitization: Inherently provided by React's standard HTML escaping of string values, which prevents XSS and layout-breaking injections.
Audit Metadata