listen-notifications
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
listencommand-line utility for sending notifications. This is a standard functional requirement for the skill's stated purpose and utilizes a vendor-provided tool. - [DATA_EXFILTRATION]: The skill facilitates sending data to an external notification service via a user-configured webhook. Security risks are mitigated by explicit instructions to the agent to exclude credentials, secrets, or large logs from notifications.
- [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection through its file-reading capabilities.
- Ingestion points: The skill can read local files (e.g.,
./report.md) via the--markdown-fileargument. - Boundary markers: There are no explicit delimiters defined to isolate the content of these files from the agent's instructions.
- Capability inventory: The skill utilizes the
listenCLI to perform network-based notifications. - Sanitization: The skill relies on instructional constraints provided to the agent to avoid sensitive data and to summarize logs rather than programmatic sanitization.
Audit Metadata