email-verification

Pass

Audited by Gen Agent Trust Hub on Mar 22, 2026

Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill reads email addresses from CSV files and transmits them to external provider APIs for verification. This handling of PII is a core component of the skill's intended functionality.
  • [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests untrusted data from external sources. Ingestion points: The skill parses user-provided CSV files (Step 2) and fetches or reads documentation from external providers (Step 0). Boundary markers: There are no explicit instructions or delimiters defined to isolate the untrusted content from the agent's command context. Capability inventory: The skill is capable of making network requests (API calls) and performing file system operations (reading and writing CSV/JSON files). Sanitization: The instructions do not specify any validation or sanitization routines for the data extracted from CSVs or external documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 22, 2026, 02:42 PM