pp-resend

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the resend-pp-cli binary using npx and go install from resources managed by the vendor (mvanhorn).
  • [COMMAND_EXECUTION]: The skill invokes the resend-pp-cli binary to perform administrative tasks, search emails, and manage API keys.
  • [DATA_EXFILTRATION]: The CLI tool includes a --deliver webhook:<url> feature that allows the user or agent to send command results (which may include PII or API metadata) to an external URL.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill retrieves and processes untrusted data from the Resend API, including email bodies, subjects, and contact information.
  • Boundary markers: None provided; the skill does not instruct the agent to use delimiters or ignore instructions embedded in the retrieved data.
  • Capability inventory: The skill has the ability to execute shell commands, write to files, and perform network requests via webhooks.
  • Sanitization: There is no mention of sanitizing or escaping the data fetched from the Resend API before it is interpolated into the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:45 AM