setup-notification
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates the configuration of 'Stop' and 'Notification' hooks in the agent's
settings.jsonfile, enabling the execution of included scripts for status updates.\n- [SAFE]: The skill utilizes native macOS utilities (osascript,say,afplay) for local user feedback. Text-to-speech functionality leverages a well-known service via theedge-ttsutility, representing a standard integration for speech synthesis.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing environmental data. \n - Ingestion points: Metadata such as current working directory and git branch name are read from
stdininscripts/notification-hook.shandscripts/stop-speak.sh.\n - Boundary markers: None present.\n
- Capability inventory: Access to
osascriptfor dialogs,tmuxfor pane switching, and audio playback.\n - Sanitization: While the scripts use
jqto parse JSON, they lack specific escaping for AppleScript control characters when interpolating variables into UI alerts.
Audit Metadata