resend
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Package Usage: The skill uses
npxto invoke theemulatepackage and references other libraries such as@emulators/adapter-nextand@emulators/resend. These are development-time dependencies provided by the vendor to facilitate local testing. - Local Command Interaction: The instructions include several
curlandnpxcommands designed to interact with a local server (localhost:4000). This allows the agent to manage email flows and verify application behavior without sending actual emails. - Data Ingestion Surface: The skill describes ingestion points where email content is retrieved from the local emulator (SKILL.md). The skill lacks explicit boundary markers for this data, but the agent's capabilities are focused on Bash commands like
curlandnpx. The provided examples include sanitization through pattern matching, such as usinggrepto extract specific numeric codes, which reduces the surface for potential indirect prompt injection.
Audit Metadata