email-setup
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates standard development patterns for setting up an email service without any malicious behavior.
- [EXTERNAL_DOWNLOADS]: The skill installs 'resend' and '@react-email/components' from the official npm registry, which are standard libraries for this purpose.
- [CREDENTIALS_UNSAFE]: The skill recommends using an environment variable for the 'RESEND_API_KEY' and uses a non-sensitive placeholder 're_...', following security best practices for secret management.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an ingestion surface where data such as user email addresses, application names, and dynamic URLs are processed in 'lib/email.ts' and template files like 'emails/my-email.tsx'. This data is subsequently used in network operations via the Resend API. While boundary markers and explicit sanitization are not detailed in the instructions, the implementation represents the intended primary function of the skill and follows standard templating patterns.
Audit Metadata