macos-notification
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
osascriptsystem binary to execute AppleScript commands for displaying notifications and dialog boxes. This is a standard system tool used for its intended UI notification purposes. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection (Category 8) by interpolating potentially untrusted data into AppleScript command strings.
- Ingestion points: The notification titles, subtitles, and messages in SKILL.md are designed to be filled with dynamic content that may originate from external tasks or user input.
- Boundary markers: The command templates do not utilize any delimiters or instructions to prevent the execution of embedded AppleScript commands within the input strings.
- Capability inventory: The
osascriptbinary can execute arbitrary AppleScript, which includes thedo shell scriptcommand capable of running terminal commands with the user's privileges. - Sanitization: There are no sanitization or escaping mechanisms provided in the skill to handle special characters or malicious code injected into the notification content.
Audit Metadata