resend
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/check-updates.pyutility fetches metadata from the official npm registry (registry.npmjs.org) to verify version currency. This is a standard developer maintenance task. - [COMMAND_EXECUTION]: The instructions include standard package management commands (
npm install,pip install) and usage of the Resend CLI and MCP tools. These are necessary for the primary function of the skill. - [CREDENTIALS_SAFE]: Code examples utilize standard placeholders like
re_xxxxxand correctly advise the use of environment variables for API key storage, following security best practices. - [INDIRECT_PROMPT_INJECTION]: The skill documents methods for interpolating user data into email templates. While this creates a potential surface for indirect injection, the skill leverages Resend's structured API and React Email's component-based rendering, which provides inherent protection compared to manual HTML construction.
Audit Metadata