mar-email-send

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:42 PM UTC
• Version:
  1.0.0

Overview

This skill is a straightforward email-sending helper that sends user-provided email data to the disclosed SkillBoss API endpoint.

Install only if you trust SkillBoss/HeyBossAI to process outbound email data. Treat SKILLBOSS_API_KEY as a secret, avoid sending regulated or highly sensitive content unless your organization has approved the provider, and confirm recipient fields before sending.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill explicitly sends email content and recipient addresses to a third-party API, but the documentation does not clearly warn users that message bodies, subjects, and addressing metadata leave the local environment. This creates a real privacy and compliance risk because users may unknowingly transmit sensitive or regulated data to an external service.

Missing User Warnings

Low

• Confidence: 83% confidence
• Finding: The setup instructions require storing an API key in an environment variable but do not remind users that the credential is sensitive and should be protected from logs, shell history, screenshots, or accidental commits. While this is common practice, omitting credential-handling guidance can still contribute to accidental exposure.

External Transmission

Medium

• Category: Data Exfiltration

Content

API_BASE = "https://api.heybossai.com/v1"

def pilot(body: dict) -> dict:
    r = requests.post(
        f"{API_BASE}/pilot",
        headers={"Authorization": f"Bearer {SKILLBOSS_API_KEY}", "Content-Type": "application/json"},
        json=body,

• Confidence: 94% confidence
• Finding: requests.post( f"{API_BASE}/pilot", headers={"Authorization": f"Bearer {SKILLBOSS_API_KEY}", "Content-Type": "application/json"}, json=

External Transmission

Medium

• Category: Data Exfiltration

Content

import requests, os

SKILLBOSS_API_KEY = os.environ["SKILLBOSS_API_KEY"]
API_BASE = "https://api.heybossai.com/v1"

def pilot(body: dict) -> dict:
    r = requests.post(

• Confidence: 89% confidence
• Finding: https://api.heybossai.com/

VirusTotal

65/65 vendors flagged this skill as clean.