react-email
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and official packages from well-known services and organizations, including Resend, SendGrid, Mailgun, Postmark, and AWS SES. It provides instructions for installing these tools via standard package managers like npm and Bun.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process user-defined data (props) and translation files to generate email content. This creates a surface where untrusted data could influence the agent's output. The skill notes that the Markdown component should be used specifically for trusted strings.
- Ingestion points: Template properties (Props) and localization message files (e.g., JSON files for next-intl) in the
emails/directory. - Boundary markers: The skill does not provide specific instructions to the agent to validate or sanitize these inputs beyond general React rendering safety.
- Capability inventory: The skill uses file system operations (via the email CLI to watch and export templates) and network operations (via third-party email provider SDKs to send rendered HTML).
- Sanitization: Standard React JSX escaping is utilized, but the skill lacks explicit guidance for handling adversarial content in template variables.
Audit Metadata