add-emails
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
resendand@react-email/componentspackages from the public npm registry, which are industry-standard tools for rendering and sending emails.\n- [CREDENTIALS_UNSAFE]: Security best practices are followed by instructing the user to store sensitive tokens, such as the Resend API key and Supabase service role key, in environment variables rather than hardcoding them into the source code.\n- [COMMAND_EXECUTION]: Utilizes routine package management commands (npm install) to set up the necessary libraries for the feature.\n- [DATA_EXFILTRATION]: Outbound data flow is strictly confined to the official Resend and Supabase APIs, supporting the intended functionality of email delivery and user profile management without unauthorized data leakage.
Audit Metadata