transactional-email
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by recommending the use of environment variables (e.g., 'env.RESEND_API_KEY') for managing API keys and sensitive credentials rather than hardcoding them.
- [SAFE]: The provided code snippets utilize well-known and trusted industry libraries such as 'resend' and '@react-email/components'.
- [SAFE]: The documentation emphasizes critical security and deliverability configurations, including SPF, DKIM, and DMARC authentication, as well as background job processing to prevent blocking user requests or exposing internal API failures to the frontend.
- [SAFE]: The 'Pitfalls' section proactively addresses security risks like data leakage across tenants, recommending explicit data validation for recipients and organizations.
Audit Metadata