cenjie/email-best-practices
skills/email-best-practices/SKILL.md
Use when building email features, emails going to spam, high bounce rates, setting up SPF/DKIM/DMARC authentication, implementing email capture, ensuring compliance (CAN-SPAM, GDPR, CASL), handling webhooks, retry logic, or deciding transactional vs marketing.
development
Updated Apr 25, 2026
$ install --global
skillsauthnpx skillsauth add cenjie/skills email-best-practicesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 6:12 AM86.5s11 files scanned
SKILL.md
- name:
- email-best-practices
- description:
- Use when building email features, emails going to spam, high bounce rates, setting up SPF/DKIM/DMARC authentication, implementing email capture, ensuring compliance (CAN-SPAM, GDPR, CASL), handling webhooks, retry logic, or deciding transactional vs marketing.
- license:
- MIT
- author:
- Resend
- version:
- 1.0.2
- homepage:
- https://resend.com/agent-skills
- source:
- https://github.com/resend/email-best-practices
- repository:
- https://github.com/resend/email-best-practices
- documentation:
- https://resend.com/docs/email-best-practices-skill
Email Best Practices
Guidance for building deliverable, compliant, user-friendly emails.
Architecture Overview
[User] → [Email Form] → [Validation] → [Double Opt-In]
↓
[Consent Recorded]
↓
[Suppression Check] ←──────────────[Ready to Send]
↓
[Idempotent Send + Retry] ──────→ [Email API]
↓
[Webhook Events]
↓
┌────────┬────────┬─────────────┐
↓ ↓ ↓ ↓
Delivered Bounced Complained Opened/Clicked
↓ ↓
[Suppression List Updated]
↓
[List Hygiene Jobs]
Quick Reference
| Need to... | See | |------------|-----| | Set up SPF/DKIM/DMARC, fix spam issues | Deliverability | | Build password reset, OTP, confirmations | Transactional Emails | | Plan which emails your app needs | Transactional Email Catalog | | Build newsletter signup, validate emails | Email Capture | | Send newsletters, promotions | Marketing Emails | | Ensure CAN-SPAM/GDPR/CASL compliance | Compliance | | Decide transactional vs marketing | Email Types | | Handle retries, idempotency, errors | Sending Reliability | | Process delivery events, set up webhooks | Webhooks & Events | | Manage bounces, complaints, suppression | List Management |
Start Here
New app? Start with the Catalog to plan which emails your app needs (password reset, verification, etc.), then set up Deliverability (DNS authentication) before sending your first email.
Spam issues? Check Deliverability first—authentication problems are the most common cause. Gmail/Yahoo reject unauthenticated emails.
Marketing emails? Follow this path: Email Capture (collect consent) → Compliance (legal requirements) → Marketing Emails (best practices).
Production-ready sending? Add reliability: Sending Reliability (retry + idempotency) → Webhooks & Events (track delivery) → List Management (handle bounces).
Related Skills
cenjie/thermos
development
VerifiedTrustedCommunity
Launch both thermo-nuclear review subagents in parallel, then synthesize their findings. Use for thermos, double thermo review, or combined bug/security and code-quality branch audits.
SKILL.mdUpdated Jul 16, 2026
cenjie/thermo-nuclear-review
development
VerifiedTrustedCommunity
Comprehensive security and correctness audit of a branch's changes. Use for thermo nuclear, thermonuclear, or deep review requests, or branch/PR diff audits focused on bugs, breaking changes, security issues, devex regressions, and feature-gate leaks.
SKILL.mdUpdated Jul 16, 2026
cenjie/thermo-nuclear-code-quality-review
development
VerifiedTrustedCommunity
Run an extremely strict maintainability review for abstraction quality, giant files, and spaghetti-condition growth. Use for a thermo-nuclear code quality review, thermonuclear review, deep code quality audit, or especially harsh maintainability review.
SKILL.mdUpdated Jul 16, 2026
cenjie/shopify-storefront-graphql
development
VerifiedTrustedCommunity
Use for custom storefronts requiring direct GraphQL queries/mutations for data fetching and cart operations. Choose this when you need full control over data fetching and rendering your own UI. NOT for Web Components - if the prompt mentions HTML tags like <shopify-store>, <shopify-cart>, use storefront-web-components instead.
SKILL.mdUpdated Jul 16, 2026