react-email
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run standard development commands for scaffolding and testing email projects, such as
npx create-email@latest,npm install, andnpm run dev. These commands are standard operations within the React Email ecosystem and are intended for project setup.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official libraries from well-known registries, including@react-email/components,resend,nodemailer, and@sendgrid/mail. These resources originate from recognized services and are documented neutrally.\n- [PROMPT_INJECTION]: The skill structure processes user-provided content and localization files to generate email templates. It mitigates potential risks by providing behavioral guidelines that prevent the agent from directly interpolating raw template variables into component code, ensuring the integrity and safety of the generated output.
Audit Metadata