Ntfy Cli

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:42 PM UTC
• Version:
  1.0.0

Overview

This skill is a straightforward ntfy notification helper, but users should be careful not to send sensitive content in notifications.

Install only if you intend agents to send messages through ntfy. Use trusted endpoints, prefer HTTPS, keep topic URLs private, and avoid sending passwords, tokens, full email contents, personal data, or sensitive operational details unless you explicitly approve that disclosure.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill explicitly encourages sending notification content, including an email example with sender and subject data, to remote ntfy endpoints while only warning that the topic URL is secret. That omits the broader confidentiality risk that message bodies, metadata, and linked resources may traverse or be stored on third-party or self-hosted services, which can expose sensitive operational or personal data if agents forward raw content.

VirusTotal

64/64 vendors flagged this skill as clean.