react-email

Warn

Audited by Socket on Feb 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

[Skill Scanner] [Documentation context] Backtick command substitution detected The fragment represents a benign, well-documented guide for building and previewing React Email templates with Resend integration. The primary security considerations are standard: protect API keys, avoid leaking credentials in public repos, and ensure local previews do not trigger unintended network calls. No malicious behavior detected in this fragment. LLM verification: [LLM Escalated] The provided SKILL.md is legitimate documentation for creating and sending React-based HTML emails. There are no direct indications of malicious intent in the text, no hard-coded secrets, and no backdoor or exfiltration code. The notable security considerations are standard supply-chain risks inherent to npm-style workflows (npx scaffold, package installs) and the handling of an API key used to call an external email service. Recommended mitigations: verify scaffold/template and SDK package inte

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 22, 2026, 12:01 PM
Package URL
pkg:socket/skills-sh/openclaw%2Fskills%2Freact-email%2F@c4b3cc719f9d847267a9db8605741e2a898aedc4