Security audit
Cross-Channel Notify
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward notification helper that sends user-provided messages through configured email and iMessage channels.
Install only where Himalaya and BlueBubbles are configured for the intended accounts. Before use, verify the email address, iMessage target, subject, message content, and whether both channels should be sent, because this skill can send real messages externally.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.