email-template-builder
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard boilerplate and architectural guidance for building email infrastructure. All code snippets utilize official libraries such as
@react-email/componentsandresendfor their intended purposes. - [INDIRECT_PROMPT_INJECTION]: The skill includes templates that interpolate external data (e.g., user names, invoice items, and URLs). While this is a common attack surface for indirect injection, it is the primary functional requirement for a templating engine. The implementation utilizes environment variables for secrets and standard React components, which align with best practices for such tools.
- [EXTERNAL_DOWNLOADS]: The
EmailLayoutcomponent references a font file from Google's static font server (fonts.gstatic.com). This is a standard practice for web and email design to ensure consistent typography and does not represent a security risk.
Audit Metadata