subscription-billing
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements logic to process untrusted data from external Stripe webhooks, which creates a vulnerability surface for indirect prompt injection if that data is used in downstream automated processes such as email generation.\n
- Ingestion points: Webhook event handlers for events like
invoice.payment_failedandcustomer.subscription.deletedinSKILL.mdand evaluation task specifications.\n - Boundary markers: The instructions and code snippets lack explicit delimiters or instructions to the model to ignore potential malicious content embedded within the webhook payload.\n
- Capability inventory: The skill is capable of performing database updates (
db.subscriptions.update) and sending automated emails (sendDunningEmail,sendTrialEndingEmail,sendWinbackEmail).\n - Sanitization: No explicit sanitization or validation logic is provided to clean the incoming webhook data before it is interpolated into business logic or communication templates.
Audit Metadata