skills/openai/plugins/email/Gen Agent Trust Hub

email

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [Indirect Prompt Injection Surface]: The skill provides examples of email sending logic that accepts user-supplied data. Ingestion points: Data is ingested via req.json() in the API route examples. Boundary markers: No specific delimiters or safety instructions are included in the provided code snippets. Capability inventory: The skill enables email delivery via the Resend API. Sanitization: The provided examples focus on the integration setup and do not explicitly include input validation or sanitization logic.
  • [External Resource References]: The skill mentions standard libraries and tools for email integration. Node.js Packages: References the resend and react-email packages for managing email delivery and templating. Remote CLI Tools: Includes instructions for using npx react-email@latest for configuration, which is the official setup method for the service.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 01:52 PM