Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill provides examples of email sending logic that accepts user-supplied data. Ingestion points: Data is ingested via
req.json()in the API route examples. Boundary markers: No specific delimiters or safety instructions are included in the provided code snippets. Capability inventory: The skill enables email delivery via the Resend API. Sanitization: The provided examples focus on the integration setup and do not explicitly include input validation or sanitization logic. - [External Resource References]: The skill mentions standard libraries and tools for email integration. Node.js Packages: References the
resendandreact-emailpackages for managing email delivery and templating. Remote CLI Tools: Includes instructions for usingnpx react-email@latestfor configuration, which is the official setup method for the service.
Audit Metadata