skills/fellipeutaka/leon/react-email/Gen Agent Trust Hub

react-email

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill consists of documentation and behavioral guidelines for developing React-based email templates, adhering to industry standards and best practices for email client compatibility.
  • [SAFE]: The skill correctly handles sensitive data by recommending the use of environment variables for API keys and providing standard CLI commands for local configuration.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of templates that ingest untrusted content and uses components like Markdown for rendering. 1. Ingestion points: Component properties (e.g., 'name', 'verificationUrl'), internationalization message files, and markdown content strings. 2. Boundary markers: The skill instructs the agent to use proper TypeScript prop passing rather than potentially unsafe mustache templates directly in JSX. 3. Capability inventory: The skill utilizes CLI tools for project scaffolding and network-capable SDKs (Resend, Nodemailer, SendGrid) for email transmission. 4. Sanitization: Content rendering relies on the React framework's built-in protections and standard libraries, which are designed to mitigate injection risks in the final email output.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:03 AM