skills/vercel-labs/emulate/resend/Gen Agent Trust Hub

resend

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • External Package Usage: The skill uses npx to invoke the emulate package and references other libraries such as @emulators/adapter-next and @emulators/resend. These are development-time dependencies provided by the vendor to facilitate local testing.
  • Local Command Interaction: The instructions include several curl and npx commands designed to interact with a local server (localhost:4000). This allows the agent to manage email flows and verify application behavior without sending actual emails.
  • Data Ingestion Surface: The skill describes ingestion points where email content is retrieved from the local emulator (SKILL.md). The skill lacks explicit boundary markers for this data, but the agent's capabilities are focused on Bash commands like curl and npx. The provided examples include sanitization through pattern matching, such as using grep to extract specific numeric codes, which reduces the surface for potential indirect prompt injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 05:25 AM
Security Audit — agent-trust-hub — resend