frame-macos-notification
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references external assets from well-known and established services.
- It loads the Tailwind CSS framework from
https://cdn.tailwindcss.comto handle styling. - It fetches typography from Google Fonts (
https://fonts.googleapis.com). - [DATA_EXFILTRATION]: The skill instructions explicitly discourage the use of external image links for icons, recommending the use of CSS gradients or Unicode characters instead. This reduces the risk of tracking or data leakage through image requests.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a template that interpolates user-provided text (Application name, notification title, and body) into a rendered HTML structure.
- Ingestion points: User input fields for notification content.
- Boundary markers: The template uses standard HTML tags as structural boundaries.
- Capability inventory: The skill produces static HTML/CSS code for UI visualization.
- Sanitization: The skill relies on the agent's default output safety filters to ensure the generated content is benign.
Audit Metadata