shiny-notifications
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists exclusively of documentation and usage instructions for a legitimate third-party library. All referenced components and namespaces are consistent with the Shiny framework's official ecosystem.
- [EXTERNAL_DOWNLOADS]: The skill references the
Shiny.NotificationsNuGet package and its dependencies (Shiny.Core,Shiny.Locations,Shiny.Support.Repositories), which are standard resources for .NET development. - [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface where user-provided text from notification replies is processed by the application.
- Ingestion points:
MyNotificationDelegate.OnEntryinSKILL.mdandreference/api-reference.mdreceives data fromNotificationResponse.Text. - Boundary markers: No delimiters or boundary markers are demonstrated in the provided usage examples.
- Capability inventory:
INotificationManager(defined inreference/api-reference.md) provides capabilities to send, cancel, and manage notifications, which are then influenced by the received responses. - Sanitization: No explicit sanitization or validation of the input text is shown in the provided code snippets.
Audit Metadata