hail-hq/hail
Use Hail when an assistant or app needs phone numbers in 120+ countries, an email inbox, or inbound and outbound calls, SMS/text messages, and email. Provision numbers, submit carrier registrations, build and route Hail agents, and read conversations and delivery events through MCP or the API.
93%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required workflow ingests inbound email and messages (e.g. via `GET /v1/emails`, `GET /v1/sms`, or `list_emails`) which contain outsider-authored free text.
Where we found it
api.hail.so
domain · 22 sites
The plugin fetches inbound emails (GET /v1/emails), SMS (GET /v1/sms), calls (GET /v1/calls), and events (GET /v1/events) from api.hail.so, which contain outsider-authored free text that could carry prompt-injection payloads.
mcp.hail.so
domain · 1 site
The plugin connects to MCP at mcp.hail.so which provides tools like list_emails, list_sms, list_calls that fetch inbound communications containing outsider-authored free text.
SKILL.md
28
https://mcp.hail.so
- Audited
- Security analysis