extension-email-marketing
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill utilizes official vendor-provided modules for authorization ('caffeineai-authorization'), email marketing ('caffeineai-email-marketing'), and verification ('caffeineai-email-verification'). These dependencies are internal to the platform ecosystem and aligned with the skill's purpose.
- [SAFE]: Access control is strictly enforced for administrative functions. Methods such as topic management and marketing broadcasts verify that the caller possesses admin permissions before execution.
- [SAFE]: The workflow adheres to secure marketing standards by requiring both topic subscription and email verification before a user is eligible to receive communications.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided names and administrative email content which are interpolated into outgoing messages. This represents a functional requirement rather than a malicious pattern. 1. Ingestion points: 'name' in registerUser and 'htmlBody' in sendMarketingEmail. 2. Boundary markers: None. 3. Capability inventory: Email dispatch via EmailClient. 4. Sanitization: System-managed template interpolation.
Audit Metadata