Email Auto Reply

• Outcome: Pass
• Latest audit: May 29, 2026, 8:21 PM
• Version:
  1.0.0

Overview

This skill is a local email reply-template manager; it does not actually access email accounts, send messages, or copy recipients.

Install only if you want a simple local rule/template manager. Avoid storing secrets or sensitive customer data in reply templates, and be aware that advertised multi-account and auto-CC features are not implemented in the provided code.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The trigger phrases are very broad and generic to normal email tasks, making accidental invocation more likely during unrelated user requests. In an email automation context, unintended activation can cause automatic responses or configuration changes at the wrong time, which may lead to miscommunication, privacy issues, or unwanted outbound email behavior.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill description highlights automatic replies and automatic CC behavior but does not warn users that it may send messages on their behalf or copy additional recipients automatically. In an email workflow, silent automation can expose sensitive information to unintended recipients, create compliance issues, and amplify mistakes across customer communications.

VirusTotal

50/50 vendors flagged this skill as clean.