Security audit

Email Sequence Designer

Security checks for vulnerabilities and agentic risk

Overview

This is mostly a disclosed email-flow planning skill, but it also includes instructions for live-sending marketing email broadcasts through Resend.

Install only if you want an agent that may help plan email automations and potentially guide Resend broadcast scheduling. Before any live send, require an explicit human approval step, verify consent and suppression lists, confirm the exact segment, subject, HTML, sender, and schedule, and keep this skill separate from creative generation and final deliverability approval.

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Description-Behavior Mismatch

Medium

Confidence: 95% confidence
Finding: The skill is presented as a planning/design tool, but it also contains operational instructions to create and send Resend broadcasts, including re-running with --live. That expands the skill from advisory to execution, increasing the risk of unintended outbound email actions, consent mistakes, or abuse if an agent follows the activation block without sufficient human confirmation and control boundaries.

Intent-Code Divergence

Medium

Confidence: 91% confidence
Finding: The skill claims it does not write individual emails, yet the Resend workflow requires a subject and HTML payload for each step. This scope contradiction can cause an agent to overreach into content generation and campaign execution, bypassing intended separation of duties between design, creative generation, and sending controls.

Static analysis

No suspicious patterns detected.