resend-cli
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official installation scripts from
resend.com(e.g.,https://resend.com/install.shandhttps://resend.com/install.ps1) within its documentation and helper script hints. These are standard installation methods provided by the official service provider. - [REMOTE_CODE_EXECUTION]: The documentation and helper script provide command patterns that pipe remote scripts to a shell (e.g.,
curl ... | bash). While this pattern is generally high-risk, in this context it refers exclusively to the official installation process for the Resend CLI from the vendor's domain. - [COMMAND_EXECUTION]: The bundled helper script
scripts/resend_cli.pyuses thesubprocessmodule to interact with the system and execute theresendCLI. The execution is handled using a list of arguments (shell=False), which is a secure practice to prevent shell injection. - [DYNAMIC_EXECUTION]: The helper script dynamically constructs command-line arguments for the
resendCLI based on user-provided tasks or explicit commands. This is the primary intended function of the wrapper script to ensure deterministic and agent-friendly output.
Audit Metadata