react-email

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses official documentation and packages from the React Email project.
  • Evidence: Links to react.email and resend.com throughout the documentation.
  • [EXTERNAL_DOWNLOADS]: Mentions standard package installations for well-known developer tools.
  • Evidence: Installation commands like npm i react-email and npx create-email@latest in SKILL.md and references/EDITOR.md.
  • [COMMAND_EXECUTION]: Provides documentation for the React Email CLI tools intended for development and local environment setup.
  • Evidence: Table of CLI commands including email dev, email build, and email export in SKILL.md.
  • [PROMPT_INJECTION]: Includes specific instructions for the agent to avoid common pitfalls when generating templates, which helps maintain code integrity.
  • Evidence: Behavioral guidelines in SKILL.md prohibiting direct interpolation of template variables in JSX and providing specific patterns for PreviewProps.
  • [DATA_EXFILTRATION]: Correctly identifies and promotes the use of environment variables for sensitive API keys, ensuring credentials are not hardcoded.
  • Evidence: Usage of process.env.RESEND_API_KEY and similar patterns for other providers in SKILL.md and references/SENDING.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 09:44 PM
Security Audit — agent-trust-hub — react-email