Versioned security assessment
Report ID: SA-E6A3487E
7/5/2026, 7:17:42 AM
email-notify security assessment v7
Skill Security Certification Report
Audit model: codex Historical report
- Skill name
- email-notify
- Version
- v7
- Maintainer
- caopulan
- Coverage
- 2 Files scanned · 282 Lines analyzed
- Policy version
- Unavailable
Highest confirmed finding severity
High
1 confirmed security finding requires attention.
Installation context
Historical evidence
This report may not describe the currently installable artifact. Open the current Skill page for install guidance.
Open current Skill pageThis report does not block or authorize the manifest or ZIP.
The skill legitimately sends SMTP messages and reads environment variables for SMTP configuration, including credentials. Most SKILL.md shell/backtick detections are Markdown or setup examples, but storing SMTP credentials in shell startup files is a real concern. No prompt injection text or unauthorized exfiltration intent was found beyond the configured email notification behavior.
Report position
Historical report
Open audit history before using this report to install.
Audit attestation
Not attestable
The required immutable binding is incomplete.
Human verification
Not verified
No human verification is recorded for this report.
Coverage
2 Files scanned · 282 Lines analyzed
36 items shown for review
Limitations
This report does not claim runtime or sandbox execution and does not prove the absence of side effects.
Evidence chain
Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.
Source
Binding unavailable
Artifact
Identity incomplete
Audit
Complete
Capabilities observed
Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.
Contains scripts
May execute code included with the Skill.
Not recorded by this audit
Network access
May connect to external services.
Observed in 33 evidence locations
Filesystem access
May read or write local files.
Observed in 2 evidence locations
Env variables
May read values from the process environment.
Observed in 8 evidence locations
External commands
May invoke commands or programs outside the Skill.
Observed in 12 evidence locations
Capability review items (35)
High
Hidden file in home directory
Add the following lines to `~/.bashrc` (Linux) or `~/.zshrc` (macOS):
The setup instructions direct users to place notification settings in shell startup dotfiles. This can persist plaintext SMTP credentials in hidden home-directory files.
High
Hidden file access
Add the following lines to `~/.bashrc` (Linux) or `~/.zshrc` (macOS):
The setup instructions direct users to place notification settings in shell startup dotfiles. This can persist plaintext SMTP credentials in hidden home-directory files.
Medium
Email sending capability
import smtplib
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
description="Send an SMTP email notification for a Codex task."
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
smtp_host = os.environ.get("CODEX_EMAIL_SMTP_HOST")
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
smtp_port_raw = os.environ.get("CODEX_EMAIL_SMTP_PORT", "587")
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
smtp_user = os.environ.get("CODEX_EMAIL_USERNAME")
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
smtp_password = os.environ.get("CODEX_EMAIL_PASSWORD")
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
smtp_from = os.environ.get("CODEX_EMAIL_FROM")
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
smtp_to_raw = os.environ.get("CODEX_EMAIL_TO")
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
recipients = _split_recipients(smtp_to_raw)
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
msg["From"] = smtp_from
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
client: smtplib.SMTP = smtplib.SMTP_SSL(
This line participates directly in SMTP connection, authentication, or delivery. The skill can send task data to an external mail server.
Medium
Email sending capability
smtp_host, smtp_port, timeout=args.timeout
This line participates directly in SMTP connection, authentication, or delivery. The skill can send task data to an external mail server.
Medium
Email sending capability
client = smtplib.SMTP(smtp_host, smtp_port, timeout=args.timeout)
This line participates directly in SMTP connection, authentication, or delivery. The skill can send task data to an external mail server.
Medium
Email sending capability
if smtp_user:
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
client.login(smtp_user, smtp_password)
This line participates directly in SMTP connection, authentication, or delivery. The skill can send task data to an external mail server.
Medium
Python email libraries
import smtplib
The script imports and uses smtplib to create SMTP or SMTPS clients. That is direct network email functionality.
Medium
Python email libraries
client: smtplib.SMTP = smtplib.SMTP_SSL(
The script imports and uses smtplib to create SMTP or SMTPS clients. That is direct network email functionality.
Medium
Python email libraries
client = smtplib.SMTP(smtp_host, smtp_port, timeout=args.timeout)
The script imports and uses smtplib to create SMTP or SMTPS clients. That is direct network email functionality.
Medium
Ruby/shell backtick execution
```bash
The workflow includes a shell command that runs the Python notification helper. The command is expected, but it executes local code and passes user-controlled task text as arguments.
Medium
Email sending capability
description: Send SMTP email notifications after Codex completes a task. Use when one Codex or Claud
The documentation instructs users to configure SMTP delivery settings. This confirms expected email-sending behavior and a real external data transmission path.
Medium
Email sending capability
Send an email notification after each Codex task. Use the helper script to resolve the project name
The documentation instructs users to configure SMTP delivery settings. This confirms expected email-sending behavior and a real external data transmission path.
Medium
Email sending capability
export CODEX_EMAIL_SMTP_HOST="smtp.example.com"
The documentation instructs users to configure SMTP delivery settings. This confirms expected email-sending behavior and a real external data transmission path.
Medium
Email sending capability
export CODEX_EMAIL_SMTP_PORT="587"
The documentation instructs users to configure SMTP delivery settings. This confirms expected email-sending behavior and a real external data transmission path.
Medium
Email sending capability
If your SMTP server does not require auth, leave `CODEX_EMAIL_USERNAME` and `CODEX_EMAIL_PASSWORD` u
The documentation instructs users to configure SMTP delivery settings. This confirms expected email-sending behavior and a real external data transmission path.
Medium
Email sending capability
Set `CODEX_EMAIL_USE_SSL` to `true` for SMTPS (typically port 465) and `CODEX_EMAIL_USE_TLS` to `tru
The documentation instructs users to configure SMTP delivery settings. This confirms expected email-sending behavior and a real external data transmission path.
Low
Python environment access
value = os.environ.get(name)
The helper reads named environment values for TLS and SSL options. Access is limited to configured names, but environment access is real.
Low
Python environment access
machine_name = os.environ.get("CODEX_MACHINE_NAME")
The script reads named CODEX email and machine settings from the environment. This is legitimate configuration access, but it can include sensitive SMTP details.
Low
Python environment access
smtp_host = os.environ.get("CODEX_EMAIL_SMTP_HOST")
The script reads named CODEX email and machine settings from the environment. This is legitimate configuration access, but it can include sensitive SMTP details.
Low
Python environment access
smtp_port_raw = os.environ.get("CODEX_EMAIL_SMTP_PORT", "587")
The script reads named CODEX email and machine settings from the environment. This is legitimate configuration access, but it can include sensitive SMTP details.
Low
Python environment access
smtp_user = os.environ.get("CODEX_EMAIL_USERNAME")
The script reads named CODEX email and machine settings from the environment. This is legitimate configuration access, but it can include sensitive SMTP details.
Low
Python environment access
smtp_password = os.environ.get("CODEX_EMAIL_PASSWORD")
The script reads CODEX_EMAIL_PASSWORD from the environment for SMTP login. This is expected, but it gives the skill process access to an email credential.
Low
Python environment access
smtp_from = os.environ.get("CODEX_EMAIL_FROM")
The script reads named CODEX email and machine settings from the environment. This is legitimate configuration access, but it can include sensitive SMTP details.
Low
Python environment access
smtp_to_raw = os.environ.get("CODEX_EMAIL_TO")
The script reads named CODEX email and machine settings from the environment. This is legitimate configuration access, but it can include sensitive SMTP details.
Risk findings
Confirmed security concerns are separated from items that still need review.
Confirmed security concerns (1)
RISK-001 High
Plaintext SMTP Credential Storage Guidance
The setup instructions tell users to place CODEX_EMAIL_PASSWORD in shell startup files. This can persist SMTP credentials in plaintext dotfiles.
SKILL.md explicitly shows CODEX_EMAIL_PASSWORD in the shell profile export block. The storage risk follows directly from the documented setup.
Remediation
Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.
- FIX-001HighPlaintext SMTP credential guidance in shell startup filesRecommend provider app passwords, a secret manager, or per-session environment injection instead of storing CODEX_EMAIL_PASSWORD in ~/.bashrc or ~/.zshrc.
- FIX-002MediumEmail summaries may contain sensitive dataAdd stronger guidance to redact secrets, tokens, customer data, and private project details before sending notifications.
- FIX-003MediumSMTP recipients and sender are trusted from environment variablesDocument that users should restrict recipients and use a dedicated notification mailbox with least privilege.
- FIX-004MediumThe workflow runs a Python helper from a shell commandKeep command arguments quoted, avoid untrusted multiline content, and document dry-run verification before first use.
Expert evidence
Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.
Artifact subject
- Marketplace commit
- Unavailable
- Content hash
- Unavailable
- Tree hash
- Unavailable
- Skill path
- Unavailable
- Audit payload hash
- Unavailable
Analysis metadata
Audit model: codex
Analysis state: Complete
Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.
Verify and export
The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.
Audit attestation: not_attestable