novu-manage-preferences
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation and provided code examples focus exclusively on the intended functionality of configuring Novu notification preferences at the workflow and subscriber levels.
- [SAFE]: Sensitive data such as the NOVU_SECRET_KEY is appropriately managed using secret input types and environment variable references in code, adhering to standard security practices.
- [SAFE]: The skill recommends the use of security features like HMAC encryption (subscriberHash) for production environments to secure subscriber data.
- [SAFE]: All external dependencies (including @novu/api, @novu/framework, and @novu/js) and network endpoints (api.novu.co) are official resources provided by the vendor, Novu.
Audit Metadata