email_delivery_skill

Overview

This skill sends tax analysis reports, compliance alerts, and organisation invitations using the SendGrid API. It handles template rendering, attachments (PDF/Excel/CSV), delivery tracking, and bounce/complaint monitoring to protect sender reputation. The skill is configured via environment variables and follows legal and privacy safeguards for attachments and content.

How this skill works

The skill renders predefined templates (accountant report, compliance alert, organisation invitation, analysis complete) and posts to SendGrid's /v3/mail/send endpoint with verified sender addresses and reply-to where required. It attaches files within SendGrid limits, enforces attachment security rules, and logs delivery events (delivered, bounce, dropped, spam_report, open, click). Signed links and expiry tokens are used for sensitive CTAs.

When to use it

• Send accountant reports with PDF and Excel attachments via a send-to-accountant flow
• Deliver compliance deadline alerts and penalty warnings to entity contacts
• Send organisation invitations with accept/decline links and 7-day expiry
• Notify users when forensic analysis completes with summary and link
• Distribute shared report links instead of large attachments to save size

Best practices

• Require SENDGRID_API_KEY and NEXT_PUBLIC_APP_URL environment variables
• Use verified noreply@ or reports@ sender addresses and include reply-to for accountancy communications
• Always include the TASA 2009 disclaimer in body and PDF attachments
• Never attach raw OAuth tokens, TFNs, or other sensitive personal data
• Handle bounces and spam reports immediately to protect sender reputation
• Prefer signed dashboard links and limit attachment sizes (keep under SendGrid 30MB total)

Example use cases

• Email a combined PDF and Excel tax analysis to an accountant with a reply-to address
• Alert an entity admin of an upcoming tax obligation with a CTA to view the calendar
• Send an organisation invitation email that expires in 7 days with a signed accept token
• Notify a user when forensic analysis finds opportunities with a link to recommendations
• Deliver CSV transaction exports for downstream reconciliation, keeping size limits in mind