Claude Notifications

• Analyzed: Mar 21, 2026, 10:01 PM
• Findings: 1
• Version: 1.0.0
• Hash: 56c1f688c115cfc650b36573945c2839bebd965a0441ff10405754d2a0933cfc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill automates the setup of a notification bridge between a local macOS machine and remote devpods, which involves several high-risk operations: modifying the user's `~/.ssh/config` to enable `RemoteForward` on port 19876, establishing persistence via a `launchd` agent (`com.claude.notify-listener.plist`), and executing configuration scripts on remote hosts via SSH. While these actions are aligned with the stated purpose of routing notifications through an SSH tunnel, the combination of persistence, SSH configuration modification, and remote command execution represents a significant attack surface. No evidence of intentional malice, data exfiltration, or obfuscation was found in the primary scripts `setup_notifications.py` or `notify-listener.py`.