dual-channel-watchexec-notifications
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run watchexec wrappers and execute scripts that handle file change events and notification logic.- [EXTERNAL_DOWNLOADS]: The skill uses curl to interact with the official APIs of Telegram (api.telegram.org) and Pushover (api.pushover.net), which are recognized as well-known technology services.- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes untrusted data such as crash logs and file names. (1) Ingestion points: watchexec info files and crash context logs are read by the script. (2) Boundary markers: No explicit delimiters are used for the log content. (3) Capability inventory: The skill has Bash capabilities to perform network requests and file operations. (4) Sanitization: The skill provides specific instructions for HTML escaping of dynamic content to mitigate common injection vectors in Telegram's HTML parse mode.
Audit Metadata