Is partnership-email-blast safe to install?

SaferSkills independently audited partnership-email-blast (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

partnership-email-blast/SKILL.md · 1 file

partnership-email-blast/SKILL.md2.1 KB · Markdown

name: partnership-email-blast

description: Send per-partner email campaigns from a YAML roster through Resend, rendered via a clean HTML template. YAML is canonical; each partner gets one templated email with {{var}} substitution. Idempotent — re-runs skip partners already sent (unique index on campaign_id + partner_id WHERE ok=true). --dry-run by default, --apply sends, --prod required for live mode. Use when the user says "blast the partners", "fire the launch email", "email the partner list", "outreach campaign", or before a launch announcement.

partnership-email-blast

YAML → Resend → personalized partner emails. Idempotent re-runs. Variable substitution.

When to use

Launch outreach campaigns (compute-credit programs, partnership applications, intro emails)
Cold partner emails with per-recipient personalization
Re-running a campaign after fixing typos (idempotency skips already-sent)

How it works

Reads partnerships.yaml (campaigns + partners + template variables)
For each campaign × each partner:

Substitutes {{var_name}} in subject + greeting + intro + each section.body
Renders HTML via the email template
Sends via Resend (single API call per partner)
Records the send in partnership_blast_log (sqlite by default; pluggable)

Idempotency: re-running skips partners where (campaign_id, partner_id) is already marked ok=true

CLI

python3 partnership_blast.py                   # dry-run
python3 partnership_blast.py --apply           # test-mode send
python3 partnership_blast.py --apply --prod    # live-mode send (YAML must be mode: live)
python3 partnership_blast.py --apply --prod --resend  # force re-send to already-sent partners
python3 partnership_blast.py --partner X       # target one partner (good for debugging)

Safety

Default dry-run
Idempotency by default
Per-partner failure isolation
--prod required for live-mode YAML
Auto-CCs configurable per campaign

Hosted version

Aria Code adds bounce-tracking webhooks (Resend → server → splat) and reply attribution.

License

Apache 2.0

partnership-email-blast— agent skill

Is partnership-email-blast safe to install?

partnership-email-blast

When to use

How it works

CLI

Safety

Hosted version

License

Audit the pieces. Scan the whole. Decide.