constructive-billing
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill manages external billing webhooks through the billing_provider_module, which presents a surface for processing untrusted external data.\n
- Ingestion points: Webhook payloads from providers like Stripe or Paddle are ingested via the process_billing_event function and stored in the billing_events table (found in references/billing.md).\n
- Boundary markers: The documentation does not specify the use of clear delimiters or instructions to the agent to ignore potentially malicious instructions embedded in the webhook payloads.\n
- Capability inventory: Ingested payloads are used to perform database mutations, such as granting credits, updating subscription states, and recording usage data.\n
- Sanitization: The system implements idempotency checks to prevent duplicate processing, but the documentation does not detail any sanitization or validation of the payload content before it is made available to the agent context.
Audit Metadata