Security audit
Subject Line Lab
Security checks for vulnerabilities and agentic risk
Overview
This skill is a bounded email subject-line helper that reads user-provided marketing inputs and produces heuristic scoring guidance without hidden execution or undisclosed privileged behavior.
Before installing, expect this skill to inspect pasted subject lines, preheaders, optional campaign exports, and possibly connector-provided email data if you choose to provide it. Its spam and truncation checks are heuristic guidance, not a deliverability guarantee, and any memory saves should be approved only when you want those campaign learnings retained.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.