Send and receive emails, build with React Email, follow deliverability best practices
- Stars
- 209
- Version
- v1
- Copies
- 0
Overview
Waxell rates it high risk: 22 findings, highest severity critical.
- Highest severity
- critical
- Findings
- 22
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
Skills in this plugin
- agent-email-inboxresendUse when building any system where email content triggers actions, AI agent inboxes, automated support handlers, email-to-task pipelines,… High riskProductivityWriting & content209
- email-best-practicesresendUse when building email features, emails going to spam, high bounce rates, setting up SPF/DKIM/DMARC authentication, implementing email… Review findingsWriting & contentLegal & compliance209
- react-emailresendUse when building HTML email templates with React components, adding a visual email editor to an application using the React Email visual… Review findingsWriting & contentEngineering209
- resendresendUse when working with the Resend email API: sending transactional emails (single or batch), receiving inbound emails via webhooks,… Review findingsEngineeringDocuments209
- resend-cliresendOperate the Resend platform from the terminal: send emails (including React Email .tsx templates via --react-email), manage domains,… Review findingsEngineeringDocuments209
We don't republish the plugin's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
High risk Waxell rates it high risk: 22 findings, highest severity critical.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (22)
critical · 1
- critical
Tells Claude to download a script and pipe it to a shell
skills/agent-email-inbox/references/webhook-setup.md:159 · skill_risk:S1
high · 20
- high
Tells Claude to install unpinned packages (resend)
skills/agent-email-inbox/SKILL.md:98 · skill_risk:S2
- high
Tells Claude to install unpinned packages (resend@latest)
skills/agent-email-inbox/references/advanced-patterns.md:70 · skill_risk:S2
- high
Tells Claude to install unpinned packages (svix)
skills/agent-email-inbox/references/webhook-setup.md:102 · skill_risk:S2
- high
Tells Claude to install unpinned packages (react-email@latest)
skills/email-best-practices/references/accessibility.md:189 · skill_risk:S2
- high
Tells Claude to install unpinned packages (react-email)
skills/react-email/SKILL.md:27 · skill_risk:S2
- high
Tells Claude to install unpinned packages (react-email@latest)
skills/react-email/SKILL.md:376 · skill_risk:S2
- high
Tells Claude to install unpinned packages (to, get, started)
skills/react-email/references/COMPONENTS.md:366 · skill_risk:S2
- high
Tells Claude to install unpinned packages (@react-email/editor)
skills/react-email/references/EDITOR.md:24 · skill_risk:S2
- high
Tells Claude to install unpinned packages (next-intl)
skills/react-email/references/I18N.md:23 · skill_risk:S2
- high
Tells Claude to install unpinned packages (react-intl)
skills/react-email/references/I18N.md:163 · skill_risk:S2
- high
Tells Claude to install unpinned packages (react-i18next, i18next, i18next-resources-to-backend)
skills/react-email/references/I18N.md:246 · skill_risk:S2
- high
Tells Claude to install unpinned packages (resend-cli)
skills/resend-cli/SKILL.md:83 · skill_risk:S2
- high
Tells Claude to install unpinned packages (resend-cli)
skills/resend-cli/references/workflows.md:11 · skill_risk:S2
- high
Tells Claude to install unpinned packages (resend)
skills/resend/references/fetch-all-templates.mjs:1 · skill_risk:S2
- high
Tells Claude to install unpinned packages (resend)
skills/resend/references/installation.md:11 · skill_risk:S2
- high
Tells Claude to install unpinned packages (resend)
skills/resend/references/installation.md:12 · skill_risk:S2
- high
Tells Claude to install unpinned packages (resend)
skills/resend/references/installation.md:14 · skill_risk:S2
- high
Tells Claude to install unpinned packages (resend)
skills/resend/references/installation.md:48 · skill_risk:S2
- high
Tells Claude to install unpinned packages (resend)
skills/resend/references/installation.md:49 · skill_risk:S2
- high
Tells Claude to install unpinned packages (resend)
skills/resend/references/installation.md:50 · skill_risk:S2
medium · 1
- medium
resend: connects to an unrecognised server (mcp.resend.com)
.claude-plugin/plugin.json · mcp_risk:M9
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1 (1.0.5), seen 2026-11-03.
Files
Files
83 files, 534 KB in total. Names only; open them on GitHub.
- .claude-plugin/marketplace.json
- .claude-plugin/plugin.json
- .cursor-plugin/marketplace.json
- .cursor-plugin/plugin.json
- .gitattributes
- .github/workflows/sync-from-repo.yml
- .github/workflows/sync-prs-to-linear.yml
- .gitignore
- .grok-plugin/plugin.json
- AGENTS.md
- CLAUDE.md
- LICENSE
- README.md
- assets/app-icon.svg
- mcp.json
- plugin.json
- skill-evals/agent-email-inbox/evals.json
- skill-evals/resend/evals.json
- skills/agent-email-inbox/SKILL.md
- skills/agent-email-inbox/references/advanced-patterns.md
- skills/agent-email-inbox/references/security-levels.md
- skills/agent-email-inbox/references/webhook-setup.md
- skills/email-best-practices/SKILL.md
- skills/email-best-practices/references/accessibility.md
- skills/email-best-practices/references/compliance.md
- skills/email-best-practices/references/deliverability.md
- skills/email-best-practices/references/email-capture.md
- skills/email-best-practices/references/email-types.md
- skills/email-best-practices/references/list-management.md
- skills/email-best-practices/references/marketing-emails.md
- skills/email-best-practices/references/sending-reliability.md
- skills/email-best-practices/references/transactional-email-catalog.md
- skills/email-best-practices/references/transactional-emails.md
- skills/email-best-practices/references/webhooks-events.md
- skills/react-email/SKILL.md
- skills/react-email/references/COMPONENTS.md
- skills/react-email/references/EDITOR.md
- skills/react-email/references/I18N.md
- skills/react-email/references/PATTERNS.md
- skills/react-email/references/SENDING.md
- skills/react-email/references/STYLING.md
- skills/resend-cli/SKILL.md
- skills/resend-cli/references/api-keys.md
- skills/resend-cli/references/auth.md
- skills/resend-cli/references/automations.md
- skills/resend-cli/references/broadcasts.md
- skills/resend-cli/references/careers.md
- skills/resend-cli/references/contact-properties.md
- skills/resend-cli/references/contacts.md
- skills/resend-cli/references/domains.md
- skills/resend-cli/references/emails.md
- skills/resend-cli/references/error-codes.md
- skills/resend-cli/references/inboxes.md
- skills/resend-cli/references/logs.md
- skills/resend-cli/references/segments.md
- skills/resend-cli/references/suppressions.md
- skills/resend-cli/references/templates.md
- skills/resend-cli/references/topics.md
- skills/resend-cli/references/webhooks.md
- skills/resend-cli/references/workflows.md
- skills/resend/SKILL.md
- skills/resend/references/api-keys.md
- skills/resend/references/automations.md
- skills/resend/references/broadcasts.md
- skills/resend/references/contact-properties.md
- skills/resend/references/contacts.md
- skills/resend/references/domains.md
- skills/resend/references/events.md
- skills/resend/references/fetch-all-templates.mjs
- skills/resend/references/inboxes.md
- skills/resend/references/installation.md
- skills/resend/references/logs.md
- skills/resend/references/receiving.md
- skills/resend/references/segments.md
- skills/resend/references/sending/batch-email-examples.md
- skills/resend/references/sending/best-practices.md
- skills/resend/references/sending/email-management.md
- skills/resend/references/sending/overview.md
- skills/resend/references/sending/single-email-examples.md
- skills/resend/references/templates.md
- skills/resend/references/topics.md
- skills/resend/references/usage.md
- skills/resend/references/webhooks.md
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More engineering skills and plugins
- resendresendUse when working with the Resend email API: sending transactional emails (single or batch), receiving inbound emails via webhooks,… Review findingsEngineeringDocuments209
- resend-cliresendOperate the Resend platform from the terminal: send emails (including React Email .tsx templates via --react-email), manage domains,… Review findingsEngineeringDocuments209
coderabbitcoderabbitaiAI-powered code review in Claude Code, powered by CodeRabbit High riskEngineeringAI & agents208- code-reviewcoderabbitaiRun CodeRabbit CLI reviews, retrieve saved local or GitHub PR fix prompts, and interpret CodeRabbit authentication and review output. Use… High riskEngineeringSecurity208