webhook-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is specifically designed to ingest and process untrusted data from external webhook providers (e.g., Shopify, Stripe).
- Ingestion points: Incoming HTTP POST requests handled in
app/api/webhooks/shopify/route.tsand generic receivers. - Boundary markers: The skill utilizes cryptographic HMAC verification as a primary boundary to ensure data originates from a trusted source before processing.
- Capability inventory: The system performs database writes for idempotency tracking (
db.processedWebhooks.insert) and executes business logic based on the payload (e.g.,importOrder,syncInventory). - Sanitization: It implements strict HMAC signature validation using
timingSafeEqualand performsJSON.parseonly after the signature is verified.
Audit Metadata