Skill

agentmail

Use when an agent needs AgentMail CLI email inboxes.

○ declared by the publisher, as-is
Safety
BB: 4 or more lows, or any medium1 severity-bearing
Reliability & Quality
n/anot yet graded
Cost
1required env var declared
Popularity
55858Forks
Performance tested for◌ not assessed
no controlled task evaluation on this release
Repo★ 256k ○55.9k forks985 watchers50.4k open issueslast commit 0d old when scanned
· context signals ↓
Vettd Note

No Vettd note yet for this asset.

Best for

Not for

Re-assessed 2w ago · 7 of 7 categories assessed
Record lookup
$ vettd directory view bd5693f0-f16d-4c96-b305-48d916128da5

◌ Vettd does not install assets; this record describes a copy you obtain yourself.

Custody chainSource ↗○ linked, not verified by Vettd
Haakam Aujla (Haakam21), AgentMail ○NousResearch/hermes-agent ○v1.0.0 = 0e37a43 ◐ sha256:ffde…ba79 ◐ signature △ not assessedMIT ○record bd5693f0-f16d-4c96-b305-48d916128da5 · live
◌ public recordYou are signed out, so you see the record and nothing else. sign in
Evidence · 7 of 7 categories · 25 signals
Safety● gradedBmost recent 2w ago4 signalsrecord bd5693f0-f16d-4c96-b305-48d916128da5
how it was established4 signals · vettd · scan
vettd directory view bd5693f0-f16d-4c96-b305-48d916128da5 --json
show
References external URL — review for indirect prompt injection riskflaggedExternal URL(s) detected in SKILL.md — referenced content can change after auditvettd · scan · 2wMedium
Secrets scan passednothing foundNo secrets or unsafe code patterns were detected.vettd · scan · 2wnothing found
behavioral scan passednothing foundNo prompt-injection or jailbreak signals were detected.vettd · scan · 2wnothing found
Name validation passednothing foundThe declared skill name follows the supported naming rules.vettd · scan · 2wnothing found
Reliability & Quality● gradednot yet gradedmost recent 2w ago7 signalsrecord bd5693f0-f16d-4c96-b305-48d916128da5
how it was established7 signals · vettd · scan
vettd directory view bd5693f0-f16d-4c96-b305-48d916128da5 --json
show
Internal reference resolution completednothing foundAll body-referenced paths under references/, scripts/, and assets/ resolved in the bundle.vettd · scan · 2wnothing found
Checklist patternreadvettd · scan · 2wabsent
Description usage contextreadvettd · scan · 2wpresent
Examplesreadvettd · scan · 2wpresent
Gotchas sectionreadvettd · scan · 2wabsent
Step-by-step workflowreadvettd · scan · 2wpresent
Validation loopreadvettd · scan · 2wpresent
Performance● measured1 measuredmost recent 2w ago2 signalsrecord bd5693f0-f16d-4c96-b305-48d916128da5
how it was establishedtiktoken/cl100k_base/skill-md-body · 2 signals · vettd · scan
vettd directory view bd5693f0-f16d-4c96-b305-48d916128da5 --json
show
Progressive disclosurereadvettd · scan · 2wpresent
Static context tokensmeasuredvettd · scan · 2w594
Cost● measurednot yet measuredmost recent 2w ago1 signalrecord bd5693f0-f16d-4c96-b305-48d916128da5
how it was established1 signal · vettd · scan
vettd directory view bd5693f0-f16d-4c96-b305-48d916128da5 --json
show
Declared required environment variablereadvettd · scan · 2wAGENTMAIL_API_KEY
Compatibility◌ unjudgednot judgedmost recent 2w ago2 signalsrecord bd5693f0-f16d-4c96-b305-48d916128da5
how it was established2 signals · vettd · scan
vettd directory view bd5693f0-f16d-4c96-b305-48d916128da5 --json
show
Declared environment assumptionsreadvettd · scan · 2w
Declared skill namereadvettd · scan · 2wagentmail
Popularity◇ context onlynot judgedmost recent today5 signalsrecord bd5693f0-f16d-4c96-b305-48d916128da5
how it was establishedgithub-repo-object · 5 signals · github-api · research
vettd directory view bd5693f0-f16d-4c96-b305-48d916128da5 --json
show
Forksmeasuredgithub-api · research · today55858
Days since last commitmeasuredgithub-api · research · today0 days
Open issuesmeasuredgithub-api · research · today50422
Starsmeasuredgithub-api · research · today256002
Watchersmeasuredgithub-api · research · today985
Characteristics◇ context onlynot judgedmost recent today4 signalsrecord bd5693f0-f16d-4c96-b305-48d916128da5
how it was establishedbundle-extension-share · 4 signals · 2 sources · research/scan
vettd directory view bd5693f0-f16d-4c96-b305-48d916128da5 --json
show
Declared licensereadvettd · scan · 2wMIT
Primary bundle languageobservedvettd · scan · 2w · conf highMarkdown
Repository linkreadvettd · scan · 2wabsent
Archivedreadgithub-api · research · todayfalse
Coverage7 of 7 categories assessed · shown
Safety
✓ assessed
Secrets scan passed · behavioral scan passed · Name validation passed
Reliability & Quality
✓ assessed
Internal reference resolution completed
Performance
✓ assessed
2 signals recorded
Cost
✓ assessed
1 signal recorded
Compatibility
✓ assessed
2 signals recorded
Popularity
✓ assessed
5 signals recorded
Characteristics
✓ assessed
4 signals recorded
Freshness & re-evaluation
assessed2w ago · Cisco AI Defense · Vettd core● current
source stateThe source matches what was scanned. No changes detected.Up to date
re-check policyre-checked against the upstream source on the scheduler's cadencenext check in 3h
re-run whena new release ships, the upstream source changes, or the scanner ruleset is revisedauto-scheduled
Limitations & open conflicts
limitationevery category carries at least one signal on this release
limitationReliability & Quality carries rows but no severity-bearing one: nothing has been graded there△ gap
conflictno two sources report the same quantity on this record
Verify: does this record describe your copy?
What record bd5693f0-f16d-4c96-b305-48d916128da5 covers
scannerv11● current
validityassessed 2w ago · Up to date
$ vettd scan folder <path>
this record was taken at digest sha256:ffdeb7080e4f… compare it against the digest your own scan prints
Reproduce: re-run the evidence yourself
$ vettd scan folder /path/to/your/copy
runs the same scanners against your own copy; the published record is never overwritten
How this record comparesagainst other published records · full comparison →
Signal kinds
▲ finding: something to act on, carries a severity● measurement: a reproducible quantityƒ estimate: inferred from a sample▪ fact: read directly off the artifact◆ classification: assigned from a taxonomy◌ nothing found: a producer looked and emitted no object◇ context only: described, never graded
Custody marks
◐ computed by vettd○ declared by the publisher, as-is△ not assessed: nothing looked
$ vettd directory view bd5693f0-f16d-4c96-b305-48d916128da5 --jsonas JSON ↗