api-email-setup-resend
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides comprehensive guidance for setting up the Resend email service, emphasizing secure practices like the use of environment variables instead of hardcoded API keys.\n- [SAFE]: Includes implementation patterns for webhook verification using the
resend.webhooks.verifymethod, ensuring that only authenticated requests from the service are processed.\n- [PROMPT_INJECTION]: The skill utilizes template interpolation for dynamic email content, which presents a surface for indirect prompt injection if source data is not properly validated.\n - Ingestion points:
VerificationEmailPropsvariables inexamples/core.md\n - Boundary markers: Not explicitly defined in the provided examples\n
- Capability inventory: External network communication through the Resend SDK (
resend.emails.send)\n - Sanitization: Relies on default React JSX escaping mechanisms for interpolated values.
Audit Metadata