relay
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and integration guides for the Relay API. It does not contain executable scripts or malicious logic.
- [EXTERNAL_DOWNLOADS]: Mentions the 'standardwebhooks' NPM package as a recommended dependency for verifying webhook signatures, which is a standard security practice.
- [COMMAND_EXECUTION]: Provides instructional curl commands for manual API interaction and authentication testing.
- [PROMPT_INJECTION]: Identifies an attack surface for indirect prompt injection through user messages. 1. Ingestion points: message.received webhook payloads. 2. Boundary markers: Absent. 3. Capability inventory: Agent can send messages and reactions via API calls. 4. Sanitization: Webhook signature verification is required to prevent spoofing.
Audit Metadata