react-email
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official documentation and packages from the React Email project.
- Evidence: Links to
react.emailandresend.comthroughout the documentation. - [EXTERNAL_DOWNLOADS]: Mentions standard package installations for well-known developer tools.
- Evidence: Installation commands like
npm i react-emailandnpx create-email@latestinSKILL.mdandreferences/EDITOR.md. - [COMMAND_EXECUTION]: Provides documentation for the React Email CLI tools intended for development and local environment setup.
- Evidence: Table of CLI commands including
email dev,email build, andemail exportinSKILL.md. - [PROMPT_INJECTION]: Includes specific instructions for the agent to avoid common pitfalls when generating templates, which helps maintain code integrity.
- Evidence: Behavioral guidelines in
SKILL.mdprohibiting direct interpolation of template variables in JSX and providing specific patterns forPreviewProps. - [DATA_EXFILTRATION]: Correctly identifies and promotes the use of environment variables for sensitive API keys, ensuring credentials are not hardcoded.
- Evidence: Usage of
process.env.RESEND_API_KEYand similar patterns for other providers inSKILL.mdandreferences/SENDING.md.
Audit Metadata