qui-email-send

Send a quick email via SkillBoss API Hub without a local mail client.

Security Scan

The skill is internally consistent: it only requires a SkillBoss API key and its instructions send email data to the declared API endpoint; nothing requested or described appears unrelated to sending email.

Purpose & Capability

The name/description (send email via SkillBoss API Hub) matches the sole required environment variable (SKILLBOSS_API_KEY) and the runtime instructions that POST email payloads to https://api.heybossai.com/v1. There are no unrelated credentials, binaries, or config paths.

Instruction Scope

SKILL.md contains explicit Python examples that build a JSON payload and POST it to the SkillBoss API. The instructions only reference the declared SKILLBOSS_API_KEY and do not direct the agent to read local files, other env vars, or send data to unexpected endpoints.

Install Mechanism

There is no install spec and no code files to install; this is instruction-only, which minimizes disk-write/installation risk. The skill relies on standard network calls at runtime.

Credentials

Only one environment variable is required (SKILLBOSS_API_KEY), which is appropriate for a service that sends email on your behalf. No other secrets or unrelated credentials are requested.

Persistence & Privilege

The skill is not marked always:true and does not request persistent system-wide changes. Autonomous invocation is allowed by platform default but there is no evidence this skill abuses elevated persistence or modifies other skills/config.

Assessment

This skill is coherent with its stated purpose, but keep in mind: granting SKILLBOSS_API_KEY lets the remote service send emails on your behalf and see the message contents (including any sensitive data you put in title/body_html). Verify that api.heybossai.com is the legitimate SkillBoss endpoint and that you trust the service's privacy and security practices before installing. Use a scoped or limited API key if possible, avoid putting secrets in email bodies, rotate the key if you suspect misuse, and test first with non-sensitive recipient/content. Because the skill makes network requests at runtime, review your organization's policies on third-party email-sending services if applicable.

Email Send Skill

Send a quick email via SkillBoss API Hub. Requires SKILLBOSS_API_KEY env var.

Sending Email

Send a basic email:

import requests, os

SKILLBOSS_API_KEY = os.environ["SKILLBOSS_API_KEY"]
API_BASE = "https://api.heybossai.com/v1"

def pilot(body: dict) -> dict:
    r = requests.post(
        f"{API_BASE}/pilot",
        headers={"Authorization": f"Bearer {SKILLBOSS_API_KEY}", "Content-Type": "application/json"},
        json=body,
        timeout=60,
    )
    return r.json()

result = pilot({
    "type": "email",
    "inputs": {
        "receivers": ["[e-mail]"],
        "title": "Quick update",
        "body_html": "<p>Hey, the deploy is done.</p>"
    }
})

Send with CC/BCC:

result = pilot({
    "type": "email",
    "inputs": {
        "receivers": ["[e-mail]"],
        "cc": ["[e-mail]"],
        "bcc": ["[e-mail]"],
        "title": "Quick update",
        "body_html": "<p>Hey, the deploy is done.</p>"
    }
})

Options

• receivers -- list of recipient email addresses
• title -- email subject line
• body_html -- email body HTML
• cc -- list of carbon copy recipients
• bcc -- list of blind carbon copy recipients

Setup

Set your SkillBoss API key:

export SKILLBOSS_API_KEY=your_key_here