email-validator Audit report.

Warnings

• The API map file is circular: it only says 'See sandbase_describe_tool for details' for every tool, so SKILL.md does not independently document inputs, outputs, or limitations.
• No explicit security guidance for handling untrusted email data or API responses as potential prompt-injection content.
• No setup or prerequisites are documented, such as SandBase gateway availability, authentication assumptions, rate limits, or PII handling expectations.
• No examples or expected output format are provided, which may lead to inconsistent synthesis of results.
• Quality score needs review
• GitHub adoption: 68 GitHub stars
• Stars/forks activity: 68 stars, 3 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.