line-bot-development
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard implementation patterns for the LINE Messaging API using the official Python SDK.
- [SAFE]: All external references point to official LINE developer documentation and the authoritative GitHub repository for the SDK.
- [SAFE]: Correctly identifies the use of environment variables (LINE_CHANNEL_ACCESS_TOKEN, LINE_CHANNEL_SECRET) for managing API credentials rather than hardcoding them.
- [INDIRECT_PROMPT_INJECTION]: The skill describes a pattern for processing untrusted user input from LINE webhook events. While the provided templates are for basic command parsing, developers using this skill should be aware that processing external messages is a common surface for indirect prompt injection if the bot logic is connected to an LLM or sensitive system operations.
- Ingestion points: LINE MessageEvent content (event.message.text).
- Boundary markers: None specified in the templates.
- Capability inventory: The skill demonstrates message sending and scheduling capabilities; actual risk depends on the developer's final implementation.
- Sanitization: No explicit sanitization or validation of the message text is shown beyond basic string stripping.
Audit Metadata