build-integration
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues were detected. The skill provides legitimate instructions for using GitBook's developer tools and includes appropriate warnings regarding the handling of personal access tokens and secrets.
- [PROMPT_INJECTION]: The skill describes building integrations that process external data, such as space content changes, which inherently introduces an indirect prompt injection surface. This is a functional aspect of the platform rather than a malicious instruction.
- Ingestion points: Event handlers like
space_content_updatedas described inSKILL.mdandreferences/runtime.md. - Boundary markers: None explicitly defined in the provided code templates for processing event data.
- Capability inventory: The integration runtime provides access to
context.apifor authenticated platform operations and the standardfetchAPI for outgoing network requests. - Sanitization: No specific sanitization or validation techniques for event payloads are demonstrated in the instructional snippets.
Audit Metadata