email-template-builder
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines template components that interpolate variables (such as user names and URLs) into HTML output. This represents a data ingestion surface characteristic of template engines.
- Ingestion points: Variables passed to
WelcomeEmailandInvoiceEmailprops defined inSKILL.md. - Boundary markers: None identified in the provided code snippets.
- Capability inventory: The skill uses the
resendlibrary to transmit generated email content over the network. - Sanitization: Relies on default escaping provided by React; the
addTrackingParamsutility performs regex-based string manipulation on the final HTML content without explicit validation.- [COMMAND_EXECUTION]: The configuration includes scripts for thereact-emailCLI, which is used for local development previews and production template exporting, aligned with the skill's stated engineering purpose.
Audit Metadata