react-email
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install official packages from the NPM registry, including the
create-emailCLI and the@react-email/componentslibrary. These are well-known, community-standard tools for the React ecosystem. - [COMMAND_EXECUTION]: Suggests using standard package manager commands (npm, yarn, pnpm, and bun) for scaffolding projects and starting development servers. These commands are necessary for the skill's primary purpose and follow established development workflows.
- [SAFE]: Promotes secure coding practices by recommending that API keys and SMTP credentials (e.g., RESEND_API_KEY, SMTP_PASS) be managed through environment variables rather than being hardcoded.
- [SAFE]: Includes specific instructions for the agent to ask clarifying questions about brand assets and production URLs before generating code, which helps prevent rendering issues and ensures correct asset referencing.
Audit Metadata