resend
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
resendCLI tool to execute commands for listing and retrieving emails. - [EXTERNAL_DOWNLOADS]: The skill instructions specify the installation of the
@mjrussell/resend-clipackage from the public npm registry. - [DATA_EXFILTRATION]: The skill accesses and displays potentially sensitive inbound email content, attachments, and domain configuration data.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection by retrieving and processing the bodies of inbound emails from untrusted external senders. * Ingestion points: The
resend email listandresend email getcommands in SKILL.md. * Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present. * Capability inventory: The agent can execute theresendCLI andjqcommands. * Sanitization: No sanitization or filtering of the email data is performed before it enters the agent's context.
Audit Metadata