mar-email-send

Send a quick email via SkillBoss API Hub without a local mail client.

Security Scan

The skill's required secret, instructions, and network endpoint match its stated purpose (sending email via the SkillBoss API), and there are no disproportionate requests or install actions.

Purpose & Capability

The skill claims to send email via SkillBoss API Hub and only requires SKILLBOSS_API_KEY and an HTTPS request to api.heybossai.com, which is consistent with that purpose.

Instruction Scope

SKILL.md only shows reading SKILLBOSS_API_KEY from the environment and posting a JSON payload to the SkillBoss API. It does not instruct reading unrelated files, other environment variables, or exfiltrating system data.

Install Mechanism

Instruction-only skill (no install spec) — low risk. Note: examples use Python 'requests' but no installation instructions are provided; that is an operational gap (not a direct security issue) if the runtime lacks that dependency.

Credentials

Only a single API key (SKILLBOSS_API_KEY) is required, which is proportional to sending email via an external API. No unrelated credentials or config paths are requested.

Persistence & Privilege

Skill is not always-on and doesn't request elevated system presence or modify other skills. disable-model-invocation is false (normal); autonomous invocation is expected behavior and not flagged by itself.

Assessment

This skill appears internally consistent: it simply posts email payloads to the SkillBoss API and only needs SKILLBOSS_API_KEY. Before installing, verify you trust the SkillBoss service and the skill publisher (there's no homepage or source repo listed). Use a scoped API key if possible, store the key securely, and monitor API activity; avoid sending highly sensitive data unless you trust the service's handling and retention policy. Note that the example uses Python's requests library but the skill provides no install steps — ensure your agent environment can run the sample code or that the platform will handle HTTP calls itself.

Email Send Skill

Send a quick email via SkillBoss API Hub. Requires SKILLBOSS_API_KEY env var.

Sending Email

Send a basic email:

import requests, os

SKILLBOSS_API_KEY = os.environ["SKILLBOSS_API_KEY"]
API_BASE = "https://api.heybossai.com/v1"

def pilot(body: dict) -> dict:
    r = requests.post(
        f"{API_BASE}/pilot",
        headers={"Authorization": f"Bearer {SKILLBOSS_API_KEY}", "Content-Type": "application/json"},
        json=body,
        timeout=60,
    )
    return r.json()

result = pilot({
    "type": "email",
    "inputs": {
        "receivers": ["[e-mail]"],
        "title": "Quick update",
        "body_html": "<p>Hey, the deploy is done.</p>"
    }
})

Send with CC/BCC:

result = pilot({
    "type": "email",
    "inputs": {
        "receivers": ["[e-mail]"],
        "cc": ["[e-mail]"],
        "bcc": ["[e-mail]"],
        "title": "Quick update",
        "body_html": "<p>Hey, the deploy is done.</p>"
    }
})

Options

• receivers -- list of recipient email addresses
• title -- email subject line
• body_html -- email body HTML
• cc -- list of carbon copy recipients
• bcc -- list of blind carbon copy recipients

Setup

Set your SkillBoss API key:

export SKILLBOSS_API_KEY=your_key_here