pushover

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill facilitates communication with Pushover through the Membrane CLI, avoiding the use of hardcoded credentials. It explicitly instructs agents to let the platform handle the authentication lifecycle.- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the @membranehq/cli Node.js package. This is a legitimate vendor resource used to provide the skill's functionality.- [COMMAND_EXECUTION]: The skill utilizes shell commands via the membrane CLI to manage connections and run actions. These commands are consistent with the skill's primary purpose.- [SAFE]: The skill has a surface for indirect prompt injection as it processes natural language intents to search for or create actions. Ingestion points: SKILL.md (via the --intent and --description CLI arguments). Boundary markers: Absent. Capability inventory: Execution of integrated Pushover actions via membrane action run. Sanitization: Handled by the Membrane platform's internal logic.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 11:05 AM
Security Audit — agent-trust-hub — pushover