react-email
Audited by Socket on Feb 22, 2026
1 alert found:
Security[Skill Scanner] [Documentation context] Backtick command substitution detected The fragment represents a benign, well-documented guide for building and previewing React Email templates with Resend integration. The primary security considerations are standard: protect API keys, avoid leaking credentials in public repos, and ensure local previews do not trigger unintended network calls. No malicious behavior detected in this fragment. LLM verification: [LLM Escalated] The provided SKILL.md is legitimate documentation for creating and sending React-based HTML emails. There are no direct indications of malicious intent in the text, no hard-coded secrets, and no backdoor or exfiltration code. The notable security considerations are standard supply-chain risks inherent to npm-style workflows (npx scaffold, package installs) and the handling of an API key used to call an external email service. Recommended mitigations: verify scaffold/template and SDK package inte