desktop-notifications
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the required notification utility from the author's GitHub repository (github.com/lirrensi/agent-sommelier) using the uv package manager.- [COMMAND_EXECUTION]: Utilizes shell commands and piping to facilitate system notifications, including usage of echo, cat, curl, and find to provide content for the alerts.- [PROMPT_INJECTION]: The skill exposes a surface for indirect prompt injection by ingesting data from external files and command outputs for display.
- Ingestion points: Pipe operations and file reading commands in SKILL.md.
- Boundary markers: Not present.
- Capability inventory: Execution of the notify command for system alerts.
- Sanitization: None specified in the instructions.
Audit Metadata