OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass4 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
This skill provides functionality for sending transactional emails via a vendor-supported Motoko library. It defines a backend actor that constructs email bodies by interpolating user-supplied data into predefined templates. The skill contains a standard input processing surface for indirect prompt injection as it lacks explicit sanitization for interpolated data.
Detected behaviors
No alerts
No issues
Score: 93/100 · 2 sections analyzed