Resend CLI
Fail
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill includes instructions for the
resend api-keys listcommand, which retrieves and displays active API credentials in the agent's output context. Additionally, theresend logincommand involves the handling and storage of authentication tokens. - [EXTERNAL_DOWNLOADS]: The skill fetches the
resendpackage from the official NPM registry during the installation process. - [COMMAND_EXECUTION]: The skill executes multiple shell commands via the Resend CLI to perform operations such as sending emails, listing domains, and managing broadcasts.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could be used to influence agent behavior.
- Ingestion points: Data is ingested from the Resend API through commands like
resend contacts listandresend broadcasts list(SKILL.md). - Boundary markers: There are no boundary markers or instructions to isolate the data retrieved from the Resend platform from the agent's execution logic.
- Capability inventory: The skill possesses powerful capabilities including sending emails (
resend emails send) and managing account infrastructure like domains and API keys (SKILL.md). - Sanitization: The skill does not implement sanitization or validation of the data fetched from the external API before presenting it to the agent context.
Recommendations
- AI detected serious security threats
Audit Metadata