pp-resend
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
resend-pp-clibinary usingnpxandgo installfrom resources managed by the vendor (mvanhorn). - [COMMAND_EXECUTION]: The skill invokes the
resend-pp-clibinary to perform administrative tasks, search emails, and manage API keys. - [DATA_EXFILTRATION]: The CLI tool includes a
--deliver webhook:<url>feature that allows the user or agent to send command results (which may include PII or API metadata) to an external URL. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill retrieves and processes untrusted data from the Resend API, including email bodies, subjects, and contact information.
- Boundary markers: None provided; the skill does not instruct the agent to use delimiters or ignore instructions embedded in the retrieved data.
- Capability inventory: The skill has the ability to execute shell commands, write to files, and perform network requests via webhooks.
- Sanitization: There is no mention of sanitizing or escaping the data fetched from the Resend API before it is interpolated into the agent's context.
Audit Metadata