messaging-api
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of reference documentation and JSON examples. It does not perform any command execution, network operations, or file system modifications.
- [DATA_EXPOSURE_EXFILTRATION]: The documentation correctly identifies the use of environment variables for sensitive credentials (Channel Access Token and Channel Secret) and provides pseudocode for webhook signature verification, promoting secure development practices.
- [INDIRECT_PROMPT_INJECTION]: The skill documents the attack surface where untrusted data enters the system (via webhooks). It provides defensive guidance on signature verification to ensure data integrity and authenticity.
- [PROMPT_INJECTION]: No malicious instructions designed to override agent behavior or bypass safety guardrails were detected in the documentation or metadata.
Audit Metadata