novu-framework-integration

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill describes a framework that processes external data from trigger payloads and HTTP step responses, which are interpolated into notification content.
  • Ingestion points: payload data in workflow() definitions and response data from step.http calls.
  • Boundary markers: Variable interpolation is handled via LiquidJS templating.
  • Capability inventory: The framework supports sending notifications across multiple channels (Email, SMS, Push, Chat, In-App) and executing arbitrary logic via step.custom or step.http.
  • Sanitization: Output is sanitized by default; developers must explicitly use disableOutputSanitization: true to allow raw HTML.
  • [COMMAND_EXECUTION]: The documentation includes instructions for using the novu CLI to manage local development environments and synchronize workflow states.
  • Evidence: Commands such as npx novu@latest dev and npx novu@latest sync are used to interface with the vendor's platform.
  • [EXTERNAL_DOWNLOADS]: The skill references official libraries and deployment tools provided by the vendor.
  • Evidence: Fetches the @novu/framework and @novu/api packages from NPM and utilizes the novuhq/actions-novu-sync GitHub Action for CI/CD workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:03 AM