Security audit
Send email using MailChannels Email API
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward MailChannels email integration with disclosed credentials, webhook setup, and no hidden code or automatic execution found.
Install this only if you want an agent to send MailChannels email or process MailChannels delivery events. Use a dedicated or scoped API key where possible, require explicit approval before real sends, verify webhook signatures and account IDs, and avoid keeping raw delivery events longer than needed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
52/52 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.