discord-notify
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the 'axios' package from the official npm registry, which is a trusted and standard library for making HTTP requests.
- [PROMPT_INJECTION]: The skill's surface was evaluated for indirect prompt injection risks as it transmits agent-generated content to an external service. 1. Ingestion points: The 'content' and 'options' parameters in the sendDiscordMessage function in index.js. 2. Boundary markers: None present. 3. Capability inventory: The skill performs network POST requests using axios to the user-defined Discord webhook. 4. Sanitization: The skill does not perform sanitization on the message content, as it is intended to forward the agent's output directly.
Audit Metadata