zoho-mail
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install the
@membranehq/cliNode.js package globally. This package is the official command-line interface for the Membrane platform, which is the author of this skill. - [COMMAND_EXECUTION]: The integration relies on executing shell commands using the
membraneCLI tool. These commands are used to log in, search for connectors, and run specific Zoho Mail actions like sending or reading emails. - [PROMPT_INJECTION]: The skill includes functionality to retrieve email content via the
get-email-contentaction. This represents a potential surface for indirect prompt injection, where malicious instructions inside an email could attempt to influence the agent's behavior. However, this is a known risk factor for any email-handling skill and is managed by the agent's underlying safety filters. - Ingestion points: The
get-email-contentandlist-emailsactions inSKILL.mdbring external email data into the agent's context. - Boundary markers: Not explicitly defined in the prompt instructions.
- Capability inventory: The skill has the capability to send emails (
send-email) and make arbitrary API requests viamembrane request. - Sanitization: No specific sanitization logic is detailed in the skill instructions.
Audit Metadata