Resend CLI

Fail

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: HIGHCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill includes instructions for the resend api-keys list command, which retrieves and displays active API credentials in the agent's output context. Additionally, the resend login command involves the handling and storage of authentication tokens.
  • [EXTERNAL_DOWNLOADS]: The skill fetches the resend package from the official NPM registry during the installation process.
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands via the Resend CLI to perform operations such as sending emails, listing domains, and managing broadcasts.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could be used to influence agent behavior.
  • Ingestion points: Data is ingested from the Resend API through commands like resend contacts list and resend broadcasts list (SKILL.md).
  • Boundary markers: There are no boundary markers or instructions to isolate the data retrieved from the Resend platform from the agent's execution logic.
  • Capability inventory: The skill possesses powerful capabilities including sending emails (resend emails send) and managing account infrastructure like domains and API keys (SKILL.md).
  • Sanitization: The skill does not implement sanitization or validation of the data fetched from the external API before presenting it to the agent context.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Aug 30, 2026, 12:31 AM
Security Audit — agent-trust-hub — Resend CLI