react-email
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is strictly instructional, providing documentation and boilerplate code for creating static email templates. No malicious code, obfuscation, or unauthorized access patterns were identified.
- [EXTERNAL_DOWNLOADS]: The skill suggests installing standard, well-known libraries
react-emailand@react-email/uivia npm. These are appropriate and necessary dependencies for the stated purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The provided React template includes props for dynamic data (e.g.,
url,expiresMinutes). This represents a standard surface for transactional content; as a template generator, it relies on standard React rendering which provides automatic escaping for interpolated values.
Audit Metadata