skills/alber70g/skills/notify-user/Gen Agent Trust Hub

notify-user

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill guides the user to install bun and uv from their respective official websites, which are well-known and standard development tools. It also installs the soprano-tts package via a package manager to provide the central speech synthesis functionality.
  • [COMMAND_EXECUTION]: The skill executes local TypeScript and Shell scripts to trigger notifications. It calls system binaries like /usr/bin/afplay for recorded audio playback and /usr/bin/say for native speech synthesis. It also manages a local Gradio-based server (soprano-webui) which runs on localhost.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts text generated by the agent to be spoken aloud, which presents a surface for potential instruction injection if the text were to be re-processed as commands.
  • Ingestion points: The text parameter in references/notify-user.ts sourced from command-line arguments.
  • Boundary markers: None identified.
  • Capability inventory: Execution of afplay, /usr/bin/say, and communication with the local Gradio API.
  • Sanitization: The script prevents argument injection in the native speech fallback by using the -- separator when invoking the say command.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 07:33 PM