resend
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a transparent implementation of a Resend API client and does not exhibit any malicious intent or hidden functionality.
- [EXTERNAL_DOWNLOADS]: All network requests are directed to the official Resend API at 'api.resend.com'. The skill does not download or execute any external scripts or third-party packages.
- [CREDENTIALS_UNSAFE]: The skill handles API keys by saving them to a local configuration file at '~/.config/resend/token'. It correctly uses 0600 file permissions to ensure that the token is only readable by the owner, which is a standard security practice for CLI tools.
- [COMMAND_EXECUTION]: The skill performs its functions by executing its own internal Ruby scripts. All script logic is confined to interacting with the Resend API and does not involve the execution of arbitrary or untrusted shell commands.
Audit Metadata