Security audit
mailgun sender
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward Mailgun email-sending skill, with the expected risk that emails are sent through a third-party service using the user's Mailgun credentials.
Install only if you want an agent to send email through your Mailgun account. Use a narrowly scoped Mailgun key if possible, protect any credentials stored in shell or config files, and review recipients and message content before sending, especially for sensitive or regulated data.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.