Security audit
Notification Hub
Security checks for vulnerabilities and agentic risk
Overview
The plugin's code, instructions, and metadata are consistent with a local in-memory notification/reminder tool and do not request credentials or perform network/file I/O.
This plugin appears coherent and low-risk: it runs entirely in-process, holds notifications/reminders in memory (so they are lost on restart), registers a background timer that fires every minute to trigger reminders, and does not access environment variables or the network. If you need durable reminders across restarts or integration with external notification systems, this plugin does not provide persistence or external delivery — review/modify the code or prefer a plugin that stores data to a safe backend. Otherwise it is safe to install from a permissions perspective.
Static analysis
No suspicious patterns detected.
