resend
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is configured to download and execute the
resend-mcppackage from the npm registry usingnpx -yat runtime as defined in themcpfrontmatter section. - [COMMAND_EXECUTION]: The skill uses the
npxcommand to spawn the Resend MCP server, which manages the communication between the agent and the Resend API. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could be manipulated to influence the agent's behavior.
- Ingestion points: The
send_emailandbatch_send_emailsoperations ingest user-provided strings for the email subject and body (HTML or plain text) as described inSKILL.md. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands within the email content are provided.
- Capability inventory: The skill has network capabilities (sending emails via the Resend API) and potential local file system access (reading files via the
pathfield in attachments). - Sanitization: The instructions do not specify any sanitization or validation logic for the content processed by the email tools.
Audit Metadata