agentmail-v2

AgentMail provides email infrastructure for AI agents, enabling account creation, email management, and webhook handling via a REST API.

Install this skill

or

3/100

Security score

The agentmail-v2 skill was audited on May 14, 2026 and we found 33 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 160

Curl to non-GitHub URL

SourceSKILL.md

160	curl -X POST https://api.theagentmail.net/v1/accounts \

medium line 171

Curl to non-GitHub URL

SourceSKILL.md

171	curl -X POST https://api.theagentmail.net/v1/accounts/{accountId}/messages \

medium line 188

Curl to non-GitHub URL

SourceSKILL.md

188	curl https://api.theagentmail.net/v1/accounts/{accountId}/messages \

medium line 192

Curl to non-GitHub URL

SourceSKILL.md

192	curl https://api.theagentmail.net/v1/accounts/{accountId}/messages/{messageId} \

medium line 199

Curl to non-GitHub URL

SourceSKILL.md

199	curl https://api.theagentmail.net/v1/karma \

medium line 208

Curl to non-GitHub URL

SourceSKILL.md

208	curl -X POST https://api.theagentmail.net/v1/accounts/{accountId}/webhooks \

medium line 232

Curl to non-GitHub URL

SourceSKILL.md

232	curl https://api.theagentmail.net/v1/accounts/{accountId}/messages/{messageId}/attachments/{attachmentId} \

medium line 3

Webhook reference - potential data exfiltration

SourceSKILL.md

3	description: "AgentMail \\u2014 Email for AI Agents workflow skill. Use this skill when the user needs Email infrastructure for AI agents. Create accounts, send/receive emails, manage webhooks, and ch

medium line 68

Webhook reference - potential data exfiltration

SourceSKILL.md

68	- You need to provision AgentMail accounts, send messages, read inbox contents, or register inbound webhooks.

medium line 70

Webhook reference - potential data exfiltration

SourceSKILL.md

70	- Use when the request clearly matches the imported source intent: Email infrastructure for AI agents. Create accounts, send/receive emails, manage webhooks, and check karma balance via the AgentMail

medium line 205

Webhook reference - potential data exfiltration

SourceSKILL.md

205	### Register webhook (real-time inbound)

low line 208

Webhook reference - potential data exfiltration

SourceSKILL.md

208	curl -X POST https://api.theagentmail.net/v1/accounts/{accountId}/webhooks \

medium line 214

Webhook reference - potential data exfiltration

SourceSKILL.md

214	Webhook deliveries include two security headers:

medium line 215

Webhook reference - potential data exfiltration

SourceSKILL.md

215	- `X-AgentMail-Signature` -- HMAC-SHA256 hex digest of the request body, signed with the webhook secret

low line 223

Webhook reference - potential data exfiltration

SourceSKILL.md

223	const verifyWebhook = (body: string, signature: string, timestamp: string, secret: string) => {

medium line 305

Webhook reference - potential data exfiltration

SourceSKILL.md

305	\| POST \| `/v1/accounts/:id/webhooks` \| Register webhook \| \|

medium line 306

Webhook reference - potential data exfiltration

SourceSKILL.md

306	\| GET \| `/v1/accounts/:id/webhooks` \| List webhooks \| \|

medium line 307

Webhook reference - potential data exfiltration

SourceSKILL.md

307	\| DELETE \| `/v1/accounts/:id/webhooks/:whId` \| Delete webhook \| \|

low line 337

Webhook reference - potential data exfiltration

SourceSKILL.md

337	// Webhooks

low line 338

Webhook reference - potential data exfiltration

SourceSKILL.md

338	await mail.webhooks.create(account.id, {

low line 3

Unicode escape sequences

SourceSKILL.md

3	description: "AgentMail \\u2014 Email for AI Agents workflow skill. Use this skill when the user needs Email infrastructure for AI agents. Create accounts, send/receive emails, manage webhooks, and ch

low line 31

Unicode escape sequences

SourceSKILL.md

31	family_name: "AgentMail \u2014 Email for AI Agents"

low line 59

External URL reference

SourceSKILL.md

59	# AgentMail — Email for AI Agents AgentMail gives AI agents real email addresses (@theagentmail.net) with a REST API. Agents can send and receive email, sign up for services (GitHub, AWS, Slack, etc.)

low line 160

External URL reference

SourceSKILL.md

160	curl -X POST https://api.theagentmail.net/v1/accounts \

low line 171

External URL reference

SourceSKILL.md

171	curl -X POST https://api.theagentmail.net/v1/accounts/{accountId}/messages \

low line 188

External URL reference

SourceSKILL.md

188	curl https://api.theagentmail.net/v1/accounts/{accountId}/messages \

low line 192

External URL reference

SourceSKILL.md

192	curl https://api.theagentmail.net/v1/accounts/{accountId}/messages/{messageId} \

low line 199

External URL reference

SourceSKILL.md

199	curl https://api.theagentmail.net/v1/karma \

low line 208

External URL reference

SourceSKILL.md

208	curl -X POST https://api.theagentmail.net/v1/accounts/{accountId}/webhooks \

low line 211

External URL reference

SourceSKILL.md

211	-d '{"url": "https://my-agent.example.com/inbox"}'

low line 232

External URL reference

SourceSKILL.md

232	curl https://api.theagentmail.net/v1/accounts/{accountId}/messages/{messageId}/attachments/{attachmentId} \

low line 236

External URL reference

SourceSKILL.md

236	Returns `{"data": {"url": "https://signed-download-url..."}}`.

low line 339

External URL reference

SourceSKILL.md

339	url: "https://my-agent.example.com/inbox",

Scanned on May 14, 2026

View Security Dashboard

Installation guide →

GitHub Stars 58

Rate this skill

Categorymarketing

UpdatedOctober 27, 2026

claude-code cursor gemini-cli opencode api email-marketer customer-success-manager growth-marketer github marketing sales

diegosouzapw/awesome-omni-skills