api-email-setup-resend
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill correctly identifies the risk of hardcoding sensitive information. It explicitly instructs users to use the
RESEND_API_KEYenvironment variable and provides safe placeholders (e.g.,re_your_api_key_here) in documentation to prevent accidental exposure. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries such as
resend,@react-email/components, and@react-email/renderfrom official registries. No suspicious or unverified remote script downloads were found. - [COMMAND_EXECUTION]: The provided code snippets involve standard application logic and singleton patterns for API clients. There are no patterns involving arbitrary command execution or unsafe subprocess calls.
- [DATA_EXFILTRATION]: The skill implements security-enhancing features like webhook signature verification using the
resend.webhooks.verifymethod to ensure that incoming data originates from the trusted provider. - [PROMPT_INJECTION]: The instructions are clear and instructional, focused entirely on the technical setup of email services. No attempts to override agent behavior or bypass safety guardrails were identified.
Audit Metadata