The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Fetches project scaffolding using npx create-email@latest from the official React Email registry. This is a standard initialization step for the development environment.
[COMMAND_EXECUTION]: Instructs the agent to execute project setup and management commands, including npm install, cd react-email-starter, and npm run dev to start the local preview server.
[CREDENTIALS_UNSAFE]: Provides implementation patterns for using environment variables like RESEND_API_KEY, SMTP_USER, and SENDGRID_API_KEY to connect with email service providers. These are used as placeholders for standard secret management and do not contain hardcoded credentials.
[PROMPT_INJECTION]: The skill processes untrusted external data via translation files (e.g., messages/*.json) and user-provided props for email templates. It maintains capabilities to write files and execute commands for project setup. This risk is inherent to the development-focused nature of the tool, and the skill follows standard template generation patterns.
[REMOTE_CODE_EXECUTION]: Includes documentation for internationalization (i18n) that uses dynamic imports (e.g., import("../messages/${locale}.json")) to load translation data. This is a common architectural pattern for the supported i18n libraries and is applied within the generated application code.

react-email