email-imap-append
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The script uses the standard
imapliblibrary to connect to the configured IMAP server and append drafts. The network activity is limited to the skill's primary documented purpose.\n- [SAFE]: Credentials are read from environment variables and are not hardcoded. Thecheck-configcommand specifically omits theIMAP_PASSWORDwhen printing configuration details to stdout to prevent accidental exposure.\n- [SAFE]: The skill does not depend on any third-party Python packages or external scripts, minimizing the risk of supply chain attacks or unauthorized code execution.\n- [SAFE]: Content ingested from CLI arguments (subject, body, recipients) is used solely to construct an email draft and is not executed or interpreted as code, presenting a negligible indirect injection risk.
Audit Metadata