react-email

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to run standard development commands for scaffolding and testing email projects, such as npx create-email@latest, npm install, and npm run dev. These commands are standard operations within the React Email ecosystem and are intended for project setup.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official libraries from well-known registries, including @react-email/components, resend, nodemailer, and @sendgrid/mail. These resources originate from recognized services and are documented neutrally.\n- [PROMPT_INJECTION]: The skill structure processes user-provided content and localization files to generate email templates. It mitigates potential risks by providing behavioral guidelines that prevent the agent from directly interpolating raw template variables into component code, ensuring the integrity and safety of the generated output.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 06:25 AM