webhook-security
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a technical documentation and code template provider for securing webhook endpoints. It does not contain any malicious instructions, obfuscated code, or unauthorized network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill provides code templates that process external data from webhook requests (
request.json()). While this constitutes an ingestion surface for untrusted data, the code includes specific sanitization and validation logic, such asisValidPayload(body)and schema-enforced database checks, which are standard security mitigations. - [DYNAMIC_EXECUTION]: All database interactions in the provided TypeScript templates utilize prepared statements and parameter binding (
db.prepare().bind()), which is the industry standard for preventing SQL injection attacks during dynamic query execution.
Audit Metadata