Skip to main content

Resend Expert

Expertise in sending transactional and batch emails using the Resend API, including contact and domain management.

Install this skill

or
69/100

Security score

The Resend Expert skill was audited on Feb 16, 2026 and we found 15 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 22

Curl to non-GitHub URL

SourceSKILL.md
22curl -X POST https://api.resend.com/emails \
medium line 3

Webhook reference - potential data exfiltration

SourceSKILL.md
3description: Send emails via Resend API - transactional, batch, contacts, domains, webhooks, React Email
medium line 172

Webhook reference - potential data exfiltration

SourceSKILL.md
172## Webhooks
low line 177

Webhook reference - potential data exfiltration

SourceSKILL.md
177# Create webhook
low line 178

Webhook reference - potential data exfiltration

SourceSKILL.md
178POST /webhooks
low line 179

Webhook reference - potential data exfiltration

SourceSKILL.md
179{"url": "https://yourapp.com/webhook", "events": ["email.delivered", "email.bounced"]}
low line 184

Webhook reference - potential data exfiltration

SourceSKILL.md
184import { Webhook } from 'resend';
low line 185

Webhook reference - potential data exfiltration

SourceSKILL.md
185const webhook = new Webhook(process.env.RESEND_WEBHOOK_SECRET);
low line 186

Webhook reference - potential data exfiltration

SourceSKILL.md
186const payload = webhook.verify(body, headers);
medium line 262

Webhook reference - potential data exfiltration

SourceSKILL.md
262Use when: Sending transactional emails, marketing campaigns, contact management, domain setup, webhook configuration
low line 185

Access to .env file

SourceSKILL.md
185const webhook = new Webhook(process.env.RESEND_WEBHOOK_SECRET);
low line 13

External URL reference

SourceSKILL.md
13**Base URL**: `https://api.resend.com`
low line 22

External URL reference

SourceSKILL.md
22curl -X POST https://api.resend.com/emails \
low line 37

External URL reference

SourceSKILL.md
37POST https://api.resend.com/emails/batch
low line 179

External URL reference

SourceSKILL.md
179{"url": "https://yourapp.com/webhook", "events": ["email.delivered", "email.bounced"]}
Scanned on Feb 16, 2026
View Security Dashboard