novu-framework-integration
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes a framework that processes external data from trigger payloads and HTTP step responses, which are interpolated into notification content.
- Ingestion points:
payloaddata inworkflow()definitions and response data fromstep.httpcalls. - Boundary markers: Variable interpolation is handled via LiquidJS templating.
- Capability inventory: The framework supports sending notifications across multiple channels (Email, SMS, Push, Chat, In-App) and executing arbitrary logic via
step.customorstep.http. - Sanitization: Output is sanitized by default; developers must explicitly use
disableOutputSanitization: trueto allow raw HTML. - [COMMAND_EXECUTION]: The documentation includes instructions for using the
novuCLI to manage local development environments and synchronize workflow states. - Evidence: Commands such as
npx novu@latest devandnpx novu@latest syncare used to interface with the vendor's platform. - [EXTERNAL_DOWNLOADS]: The skill references official libraries and deployment tools provided by the vendor.
- Evidence: Fetches the
@novu/frameworkand@novu/apipackages from NPM and utilizes thenovuhq/actions-novu-syncGitHub Action for CI/CD workflows.
Audit Metadata