webhook-security

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a technical documentation and code template provider for securing webhook endpoints. It does not contain any malicious instructions, obfuscated code, or unauthorized network operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides code templates that process external data from webhook requests (request.json()). While this constitutes an ingestion surface for untrusted data, the code includes specific sanitization and validation logic, such as isValidPayload(body) and schema-enforced database checks, which are standard security mitigations.
  • [DYNAMIC_EXECUTION]: All database interactions in the provided TypeScript templates utilize prepared statements and parameter binding (db.prepare().bind()), which is the industry standard for preventing SQL injection attacks during dynamic query execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 10:10 PM