email-newsletter — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited email-newsletter (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Draft and design a complete HTML email newsletter from a topic or content brief. Output is paste-ready for Loops, Mailchimp, Beehiiv, Resend, or any standard email platform.
Critical rule: Table-based HTML with inline styles only. No CSS classes, no flexbox, no grid, no <style> blocks. Every element gets style="" directly. This is not optional -- email clients strip everything else.
Need three things to start. If all three present in the message: skip to Step 2.
If any missing, ask exactly:
"To get started, I need three things: 1. Topic -- what is this newsletter about? 2. Audience -- who is reading? (role, company size, how they know you) 3. Primary CTA -- what one action do you want readers to take?"
Wait for all three before continuing.
Ask all questions in one message, grouped by category. User can skip any -- defaults apply.
"A few questions before I draft -- answer what you know, skip the rest:
>
Content 1. Length -- brief (300 words, punchy) / standard (500-700) / deep dive (800+ words)? 2. Format -- editorial article / numbered breakdown / personal story / data report? 3. Issue context -- one-time send / part of weekly series / monthly digest? 4. CTA URL -- what's the actual link? (or I'll use a placeholder)
>
Brand 5. Company / brand name -- for header and footer 6. Tagline -- one-line description (optional, for footer) 7. City & country -- for footer (e.g. "San Francisco, US") 8. Primary brand color -- hex? (e.g. #856FE6) 9. Secondary accent -- keep default yellow-green (#D8F90A) / use brand color / something else?
>
Design 10. Background -- dark (editorial/SaaS) / light (clean/corporate) / custom hex? 11. Display font -- editorial serif (Instrument Serif) / clean modern sans / system fonts only? 12. Button style -- pill (very rounded) / softly rounded / sharp corners? 13. Visual style -- editorial / technical+data / warm+founder / bold+campaign?
>
Platform & Technical 14. Platform -- Loops / Mailchimp / Beehiiv / Resend / other? 15. Tone -- educational / conversational / bold+direct / formal / playful? 16. Personalization -- none / first name / first name + company? 17. Subject line -- have one / want 3 options? 18. Secondary sections -- sponsor block / product callout / event / quick links / none? 19. Plain-text version -- yes (recommended) / no?"
Defaults if skipped:
| Question | Default |
|---|---|
| Length | standard (500-700 words) |
| Format | editorial article |
| Issue context | one-time send |
| CTA URL | [CTA_URL] placeholder |
| Company name | [YOUR BRAND] placeholder |
| Tagline | none |
| City & country | [CITY, COUNTRY] placeholder |
| Brand color | none (use #D8F90A for all accents) |
| Secondary accent | #D8F90A (yellow-green default) |
| Background | dark |
| Display font | Instrument Serif (editorial serif) |
| Button style | pill |
| Visual style | editorial |
| Platform | generic |
| Tone | conversational |
| Personalization | none |
| Subject line | generate 3 options |
| Secondary sections | none |
| Plain-text | yes |
From Step 2 answers, determine:
Character defaults if question 13 skipped:
Never ask the user for design direction separately -- derive it from their answers.
Read references/html-email-guide.md for layout rules before choosing sections.
Based on topic + audience + CTA + secondary sections requested, select sections from this library:
| Section | Include when |
|---|---|
| header | Always -- logo placeholder + issue number or date |
| hero | Always -- big headline + 1-2 sentence hook |
| intro | Conversational or educational tone -- short personal note |
| main-content | Primary article or insight (text-heavy) |
| stat-callout | There is a compelling stat, quote, or data point |
| secondary-section | Secondary CTA was requested |
| product-cta | Brand context present and soft product plug fits |
| sponsor-block | Sponsor section was requested |
| quick-links | Curated links section was requested |
| footer | Always -- unsubscribe link + company name |
Output the chosen structure as a numbered list with one-line purpose per section:
Proposed structure:
1. Header -- logo + Issue #1 / [date]
2. Hero -- headline + hook paragraph
3. Intro -- short personal framing
4. Main Content -- [topic] breakdown
5. Stat Callout -- key data point from the story
6. CTA -- [cta text]
7. Footer -- unsubscribe + company
Does this structure work, or should I adjust any sections?Wait for confirmation before Step 4.
Write copy for each section in sequence. No HTML yet -- clean prose only.
Rules per section:
Read references/subject-line-formulas.md then write 3 subject line options (if subject line not provided by user):
Do not use em dashes. Do not use: "powerful", "seamless", "game-changing", "leverage", "innovative", "unlock", "transform", "elevate", "cutting-edge", "robust".
Read references/design-system.md and references/html-email-guide.md before generating HTML.
Template or custom -- decide based on Step 2 answers:
Use `templates/dark-newsletter.html` as base when ALL of:
Use `templates/light-newsletter.html` as base when ALL of:
Generate custom HTML from scratch when ANY of:
For custom generation: use references/design-system.md Custom Generation Guide as the full token spec. Apply user's background/font/button/accent choices throughout.
Then (for template path):
[PLACEHOLDER] values with content from Step 4[UNSUBSCRIBE_URL] placeholders are still present (platform tuning happens in Step 6)Brand color substitution rules:
If brand_color is provided:
bgcolor (#D8F90A in the height:2px row) with brand_color#D8F90A with brand_color too#D8F90A, only use brand_color for strip + stat borderIf brand_color is NOT provided: keep all #D8F90A values as-is.
Content substitution rules (from Step 2 answers):
company_name provided: replace all [YOUR BRAND] and [COMPANY NAME] placeholderscity_country provided: replace [CITY, COUNTRY] placeholdertagline provided: add as subtitle line in footer after company namecta_url provided: replace all [CTA_URL] placeholders with actual URLpersonalization = first_name: add platform-appropriate first name variable to hero greeting -- e.g. Hey %%first_name%%, on Beehiiv, Hey {{first_name}}, on Loops, Hey *|FNAME|*, on Mailchimppersonalization = first_name + company: add both variables where contextually appropriateBrand color visual tension check (on dark email):
Does the brand color visually pop on #111111? Test mentally: would it be visible as a 2px strip?
#555555#2A2A2A): skip brand_color for ALL accent uses, fall back to #D8F90A for every elementAccent discipline rule: brand_color appears in AT MOST 3 places: brand strip, stat border, category label. Never in body copy, headlines, button backgrounds, or section backgrounds. Over-branding kills the premium feel.
CTA button text color:
#D8F90A button background: always use #0A0A0A text (it's a light color)#111111 button background (inside yellow callout card): always use #F2F2F2 text#0A0A0A if brand is light, #FFFFFF if brand is darkRequired on every `<td>` with a background color: Both the bgcolor= HTML attribute AND the inline background-color: style. Example:
<td bgcolor="#D8F90A" style="background-color:#D8F90A;">The attribute handles Outlook. The style handles everything else. Never use just one.
Design excellence (frontend-design principles, email-adapted):
Email's table constraints don't limit design ambition. Push within them:
-0.04em tracking. 6-7 word headlines = 56px, -0.03em. 8 words = 48px. Never size down for safety -- the headline is a poster, not a label. Instrument Serif italic on stat quotes adds literary weight no other element can match.#0A0A0A#111111#111111, inner elevated card: #1A1A1A#161616 (subtle elevation creates depth without color)#111111 (contrast with body)#D8F90A (the ONLY bright element -- never dilute)#080808Read references/platform-compat.md and apply platform-specific adjustments:
| Platform | Action | ||
|---|---|---|---|
| Loops | Replace [UNSUBSCRIBE_URL] with {{unsubscribe_url}}. Replace [FIRST_NAME] refs with {{first_name}} | ||
| Mailchimp | Replace [UNSUBSCRIBE_URL] with `*\ | UNSUB\ | *. Add mc:edit="[section-name]" to editable <td>` blocks |
| Beehiiv | Replace [UNSUBSCRIBE_URL] with %%unsubscribe_url%%. Replace [FIRST_NAME] with %%first_name%% | ||
| Resend | Replace [UNSUBSCRIBE_URL] with {unsubscribeUrl}. Note: React Email .tsx output available on request | ||
| Generic/Other | Keep [UNSUBSCRIBE_URL] as placeholder with comment: <!-- Replace with your unsubscribe link --> |
Check the generated HTML before output. Fix every issue found -- do not skip.
Rendering checks:
<style> blocks, no class= attributes anywhere<table> have cellpadding="0" cellspacing="0" border="0"alt="", border="0", display:block in style<table> + <td> structure with bgcolor= attribute, not just <a> with display:blockflexbox, grid, position:, float:, CSS variables (--var), min-height, max-height in any inline styleborder-radius on <td> only -- not on <table> or <a> (Outlook renders <td> radius)Content checks:
Design quality checks:
references/design-system.mdIf any check fails: fix inline, then re-run the checklist mentally.
If 3 subject line options were generated, present them with a recommendation:
**Subject Line Options**
A. [subject] -- [formula used, best for what audience/context]
B. [subject] -- [formula used]
C. [subject] -- [formula used]
Recommendation: [A/B/C] -- [one sentence reason based on audience and tone]If user provided their own subject line, skip this step.
Save the HTML to a file first -- do not dump it in the chat.
mkdir -p docs/newslettersWrite the full HTML to: docs/newsletters/[topic-slug]-[YYYY-MM-DD].html
Where [topic-slug] is the topic lowercased with spaces replaced by hyphens (e.g. "AI B2B Sales" → ai-b2b-sales).
If a plain-text version was requested, also write it to: docs/newsletters/[topic-slug]-[YYYY-MM-DD].txt
Then present this summary in the chat (no HTML code fence):
## Newsletter: [topic slug]
Date: [today's date] | Platform: [platform] | Tone: [tone]
Saved to: docs/newsletters/[topic-slug]-[YYYY-MM-DD].html
---
### Subject Lines
A. [subject A] -- [formula]
B. [subject B] -- [formula]
C. [subject C] -- [formula]
Recommended: [letter] -- [one-sentence reason]
---
### Send Checklist
- [ ] Replace [CTA_URL] with your actual link
- [ ] Replace [COMPANY NAME] and [CITY, COUNTRY] in footer
- [ ] Replace [YOUR BRAND] in header with your brand name (or swap in a logo image)
- [ ] Verify unsubscribe variable works in [platform]
- [ ] Send a test email to yourself before launchingDo not print the HTML in the chat. The file path tells the user where to find it.
| Section | Purpose |
|---|---|
| header | Logo + issue number or date |
| hero | Big headline + 1-2 sentence hook |
| intro | Short personal note or context |
| main-content | Primary article or insight (text-heavy) |
| image-block | Full-width image + caption |
| stat-callout | Highlighted stat or quote in a box |
| secondary-section | Second story or feature |
| product-cta | Soft product plug or feature highlight |
| sponsor-block | Sponsored content (clearly labeled) |
| quick-links | Curated links section (3-5 items) |
| footer | Unsubscribe link, company info, legal |
.tsx component output -- request explicitly, good for Resend + dev teams~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.