e-blast-newsletter
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external subscriber data and email content which are interpolated into templates.
- Ingestion points: Subscriber contact information (names, emails) ingested via API calls or CSV imports described in SKILL.md.
- Boundary markers: None specified for the HTML email templates.
- Capability inventory: Network communication with the well-known service API at api.resend.com.
- Sanitization: No explicit instructions for sanitizing user-provided template content are provided.
- [DATA_EXPOSURE]: The skill requires a Resend API key for operation but correctly instructs the user to store it in an environment variable (RESEND_API_KEY) rather than hardcoding it, adhering to standard secret management practices.
- [EXTERNAL_DOWNLOADS]: The skill references api.resend.com and resend.com. These are official endpoints for a well-known technology service used for the skill's primary purpose. No untrusted or suspicious remote code downloads were detected.
Audit Metadata