История аудитов
email-notify - 6 аудиты
Версия аудита 6
Последняя Средний рискJun 28, 2026, 08:18 PM
Static findings for network, environment access, filesystem references, and documented commands are mostly expected for an SMTP notification skill. No prompt injection or malicious intent was found, but the skill can email task summaries and uses SMTP credentials from environment variables, so users need a clear data disclosure warning.
Проблемы среднего риска (3)
Проблемы низкого риска (5)
Факторы риска
⚡ Содержит скрипты (1)
🌐 Доступ к сети (2)
🔑 Переменные окружения (3)
📁 Доступ к файловой системе (3)
⚙️ Внешние команды (1)
Обнаруженные паттерны
Версия аудита 5
Низкий рискJan 16, 2026, 08:48 PM
This skill is a straightforward SMTP email notification utility. It reads environment variables for SMTP configuration, reads AGENTS.md for optional project name extraction, and sends task completion notifications via standard Python smtplib. All detected patterns are expected functionality - email sending is the stated purpose, environment access is for configuration, and filesystem reads are for project name resolution. No malicious behavior confirmed.
Факторы риска
🌐 Доступ к сети (1)
🔑 Переменные окружения (1)
📁 Доступ к файловой системе (1)
Версия аудита 4
Низкий рискJan 16, 2026, 08:48 PM
This skill is a straightforward SMTP email notification utility. It reads environment variables for SMTP configuration, reads AGENTS.md for optional project name extraction, and sends task completion notifications via standard Python smtplib. All detected patterns are expected functionality - email sending is the stated purpose, environment access is for configuration, and filesystem reads are for project name resolution. No malicious behavior confirmed.
Факторы риска
🌐 Доступ к сети (1)
🔑 Переменные окружения (1)
📁 Доступ к файловой системе (1)
Версия аудита 3
Низкий рискJan 8, 2026, 05:57 AM
This skill is a straightforward SMTP email notification script. It reads environment variables and AGENTS.md for configuration, then sends task completion notifications via SMTP. No malicious behavior detected. The code matches its stated purpose of sending email notifications.
Факторы риска
⚡ Содержит скрипты (1)
🌐 Доступ к сети (1)
📁 Доступ к файловой системе (1)
🔑 Переменные окружения (2)
Версия аудита 2
Низкий рискJan 8, 2026, 05:57 AM
This skill is a straightforward SMTP email notification script. It reads environment variables and AGENTS.md for configuration, then sends task completion notifications via SMTP. No malicious behavior detected. The code matches its stated purpose of sending email notifications.
Факторы риска
⚡ Содержит скрипты (1)
🌐 Доступ к сети (1)
📁 Доступ к файловой системе (1)
🔑 Переменные окружения (2)
Версия аудита 1
Низкий рискJan 8, 2026, 05:57 AM
This skill is a straightforward SMTP email notification script. It reads environment variables and AGENTS.md for configuration, then sends task completion notifications via SMTP. No malicious behavior detected. The code matches its stated purpose of sending email notifications.