notify-templates
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Dynamic Script Execution: The skill instructs the agent to use
python -cto process data and append JSON records to/mnt/user/sinks/outbox.jsonl. This involves generating and running short Python scripts at runtime. While this is a standard method for ensuring structured output, it represents a dynamic execution pattern that relies on the agent correctly formatting the script logic. - Data Processing Surface (Indirect Prompt Injection): The skill processes external data (such as product names and SKUs) and interpolates them into notification templates. While the use of
json.dumps()in the provided examples helps ensure the final output is valid JSON, the ingestion of untrusted data into communication channels (like Slack or Email) is a common surface where malformed input could potentially influence the layout or appearance of the final message.
Audit Metadata