line-notification-message
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides links to official LINE SDKs and documentation on GitHub and official domains (
line.me,line.biz,lycbiz.com). These are recognized as official resources for the documented service. - [INDIRECT_PROMPT_INJECTION]: The skill documents how to process incoming webhook events, which are a potential vector for untrusted data.
- Ingestion points: Webhook payload handling documented in
references/delivery-webhook.md. - Boundary markers: Not explicitly defined in the reference documentation.
- Capability inventory: API interaction for sending messages via
POSTrequests. - Sanitization: The skill recommends signature verification using the channel secret to ensure the authenticity of the webhook source.
- [CREDENTIALS_UNSAFE]: The skill documents the use of environment variables (
LINE_CHANNEL_ACCESS_TOKEN,LINE_CHANNEL_SECRET) for secret management, which is an industry standard for avoiding hardcoded credentials.
Audit Metadata