Security audit
Administer Mermail Workspace
Security checks for vulnerabilities and agentic risk
Overview
This skill is a clearly scoped Mermail workspace administration helper that discloses its API key requirement and administrative actions.
Install this only if you intend to let the agent administer your Mermail workspace with the permissions of MERMAIL_API_KEY. Review write previews carefully, especially member removals, domain deletion, role changes, invitations, and mailbox provisioning, because those can affect access, routing, and credits.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.