notify-user
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install
bunanduvfrom their respective official websites, which are well-known and standard development tools. It also installs thesoprano-ttspackage via a package manager to provide the central speech synthesis functionality. - [COMMAND_EXECUTION]: The skill executes local TypeScript and Shell scripts to trigger notifications. It calls system binaries like
/usr/bin/afplayfor recorded audio playback and/usr/bin/sayfor native speech synthesis. It also manages a local Gradio-based server (soprano-webui) which runs on localhost. - [INDIRECT_PROMPT_INJECTION]: The skill accepts text generated by the agent to be spoken aloud, which presents a surface for potential instruction injection if the text were to be re-processed as commands.
- Ingestion points: The
textparameter inreferences/notify-user.tssourced from command-line arguments. - Boundary markers: None identified.
- Capability inventory: Execution of
afplay,/usr/bin/say, and communication with the local Gradio API. - Sanitization: The script prevents argument injection in the native speech fallback by using the
--separator when invoking thesaycommand.
Audit Metadata