api-email-resend-react-email
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (such as user-provided names, email subjects, and message bodies) which is then interpolated into email templates and sent via network operations.
- Ingestion points: Data enters the context through props interfaces like
WelcomeEmailProps,NotificationEmailProps, andSendEmailOptionsfound inexamples/core.mdandexamples/templates.md. - Boundary markers: The instruction files do not specify boundary markers or provide explicit warnings to the model to ignore embedded instructions within the user-supplied data variables.
- Capability inventory: The skill leverages
resend.emails.sendandresend.batch.sendfor network communication as demonstrated inexamples/core.mdandexamples/async-batch.md. - Sanitization: The implementation relies on the default auto-escaping mechanisms provided by React and the
@react-email/componentslibrary.
Audit Metadata