gotify-notifications
Deploys a self-hosted Gotify server for real-time push notifications, enabling alerts from your agent without third-party services.
Install this skill
or
82/100
Security score
The gotify-notifications skill was audited on Mar 1, 2026 and we found 4 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 216
Piping content to bash shell
SourceSKILL.md
| 216 | 0 */6 * * * df -h / | bash /path/to/scripts/send.sh --token "$GOTIFY_TOKEN" --title "Disk Report" --stdin --priority 3 |
low line 54
External URL reference
SourceSKILL.md
| 54 | - **iOS:** Use any WebSocket client or the web UI at `http://your-server:8080` |
low line 148
External URL reference
SourceSKILL.md
| 148 | export GOTIFY_URL="http://localhost:8080" # Your Gotify server URL |
low line 209
External URL reference
SourceSKILL.md
| 209 | --extras '{"client::notification":{"click":{"url":"https://your-dashboard.com"}}}' |
Scanned on Mar 1, 2026
View Security Dashboard