The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local system commands to deliver audio and visual notifications.
notify.py calls system audio players including afplay, paplay, and aplay.
notify.py utilizes osascript to trigger native macOS Notification Center alerts.
notify.py runs git rev-parse --show-toplevel to identify project context for notifications.- [EXTERNAL_DOWNLOADS]: The skill transmits notification data to several well-known external communication services.
It connects to api.telegram.org for Telegram alerts.
It sends data to user-provided webhook URLs for Slack, Discord, and DingTalk.
It uses SMTP to send email notifications through user-configured mail servers.- [INDIRECT_PROMPT_INJECTION]: The skill processes event messages from agent hooks, which constitutes a vulnerability surface for spoofed notifications.
Ingestion points: Event data is ingested from sys.stdin in notify.py (lines 48-185).
Boundary markers: No delimiters or "ignore" markers are used for the message content to prevent the processing of malicious instructions embedded in agent output.
Capability inventory: The script possesses command execution (subprocess) and network transmission (urllib, curl) capabilities.
Sanitization: Input is escaped specifically for AppleScript double-quotes in send_macos_notification, but no general sanitization is performed to validate the integrity of the event message.

agent-notifier