Skills
Navigate
skills/novuhq/skills/novu-trigger-notification/Gen Agent Trust Hub

novu-trigger-notification

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill integrates with Novu using the official @novu/api (NPM) and novu-py (PyPI) packages. It also communicates with the vendor API at api.novu.co to trigger notifications.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for indirect prompt injection by processing external data within notification workflows.
  • Ingestion points: The payload and to parameters in trigger methods, as demonstrated in SKILL.md and references/single-trigger-examples.md.
  • Boundary markers: The skill instructions do not specify any delimiters or safety markers to isolate processed data from the agent's instructions.
  • Capability inventory: Sending notifications across email, SMS, push, and chat channels via the Novu API.
  • Sanitization: There is no mention or demonstration of input validation or sanitization for the notification data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:04 AM