push-notification-tester
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The scripts scripts/send-android-push.js and scripts/send-ios-push.js utilize child_process.execSync to run npm install --production automatically if the node_modules directory is not found in the scripts folder.
- [EXTERNAL_DOWNLOADS]: The skill is configured to download its required Node.js dependencies (@parse/node-apn, axios, and google-auth-library) from the public npm registry at runtime if they are not already installed locally.
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-supplied data via the --caller-name and --caller-number command-line arguments, which are directly embedded into the push notification payload sent to Firebase Cloud Messaging and Apple Push Notification service. • Ingestion points: CLI arguments in scripts/send-android-push.js and scripts/send-ios-push.js. • Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious content in these strings. • Capability inventory: The skill has the ability to read local credential files and perform network POST requests. • Sanitization: Input is processed through standard JSON stringification but lacks specific content validation.
Audit Metadata