testland/mailpit-testing
The email-testing home: configures and runs Mailpit - modern dev-mailbox server for SMTP testing with built-in REST API for assertions; default SMTP `1025` + Web UI `8025`; Chaos mode (configurable SMTP errors for resilience testing), message tagging, search filters. Carries the end-to-end email-flow workflow (multipart body, link-rewrite resolution, unsubscribe per RFC 8058, bounce + complaint webhooks) in references/email-flows.md and the legacy MailHog capture patterns + migration path in references/mailhog-legacy.md. Use when developing or testing email-sending code locally / in CI - SMTP capture, full-flow assertions, or migrating an existing MailHog deployment.
72
91%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required workflow instructs the agent to set up and interact with a local Mailpit email testing server via its REST API, which ingests intercepted emails containing outsider-authored free text.
Where we found it
localhost:8025
domain · 4 sites
The plugin documents REST API interactions with a local Mailpit instance at http://localhost:8025 for email capture and assertions in tests.
SKILL.md
76
# Web UI: http://localhost:8025
118
BASE = "http://localhost:8025"
150
schema at `http://localhost:8025/api/v1/` (Mailpit ships an
references/mailhog-legacy.md
102
BASE = "http://localhost:8025"
mail-tester.com
domain · 2 sites
The email-flows reference mentions mail-tester.com as an optional external service for pre-production deliverability scoring.
references/email-flows.md
179
- **mail-tester.com**: send a test email; receive a 0 - 10 deliverability score covering DKIM/SPF/DMARC + content quality
references/email-flows.md
226
- mail-tester.com - pre-prod deliverability scoring
dmarcian.com
domain · 2 sites
The email-flows reference mentions dmarcian.com as an optional external service for production DMARC monitoring.
references/email-flows.md
180
- **dmarcian.com**: per-domain DMARC monitoring for production
references/email-flows.md
227
- dmarcian.com - DMARC monitoring
- Audited
- Security analysis