skills/notifications/proactive-sender/SKILL.md
Send proactive messages to the user through configured channels. Allows Sven to autonomously reach out with questions, alerts, progress updates, or any message without waiting for user input.
npx skillsauth add 47network/Sven proactive-senderInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Send proactive messages to users through Slack, Discord, WhatsApp, or any configured channel. This is how Sven reaches out autonomously.
send_message — Send a freeform proactive messagesend_alert — Send a system alert (pre-formatted with severity banner)send_question — Send a question to the user and await responsesend_progress — Send a progress update on a running taskrecord_feedback — Record user feedback on a notification (acknowledge, dismiss, mute){
"action": "send_alert",
"text": "Database connection pool exhausted on gateway-api. Current connections: 95/100. Auto-scaling connection limit.",
"severity": "error",
"category": "resource_exhaustion"
}
{
"action": "send_question",
"text": "I found 3 unused Docker volumes consuming 12GB. Should I prune them?",
"severity": "info",
"category": "custom"
}
{
"action": "send_progress",
"text": "RAG index rebuild: 847/1200 documents processed (71%). ETA: ~8 minutes.",
"severity": "info",
"category": "task_completed"
}
notifications.send: writenotifications.feedback: writedevelopment
Automated web testing advisor — generate Playwright test scripts, accessibility checks, and performance audits.
testing
Unified security posture reporting — combines SAST, dependency audit, secret scan, infrastructure scan, and pentest results into a single scored report with OWASP and SOC 2 compliance mapping, top risks, and remediation recommendations.
development
Detect hardcoded secrets, API keys, tokens, private keys, and credentials in source code and config files. 20 built-in patterns covering AWS, GitHub, Slack, Stripe, database URLs, JWTs, and more.
development
Static Application Security Testing — scan TypeScript/JavaScript source code for SQL injection, XSS, SSRF, path traversal, command injection, hardcoded secrets, insecure crypto, auth bypass, prototype pollution, and more. 14 built-in rules mapped to OWASP Top 10 and CWE.