aftership-webhooks
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data via webhook payloads, which is a potential surface for indirect prompt injection if malicious instructions are embedded in fields like shipment messages or tags.
- Ingestion points: Webhook POST endpoints in examples/nextjs/app/webhooks/aftership/route.ts, examples/express/src/index.js, and examples/fastapi/main.py.
- Boundary markers: The skill correctly enforces HMAC-SHA256 signature verification as a boundary before any data is processed or logged.
- Capability inventory: The examples demonstrate logging payload content to the console and provide TODO placeholders for application logic.
- Sanitization: While the content is not sanitized for LLM instructions, the signature verification ensures that only authenticated payloads from AfterShip are processed.
- [SAFE]: The skill demonstrates security best practices, including failing closed on missing secrets, using timing-safe comparisons for signatures, and processing raw request bodies to avoid serialization discrepancies.
Audit Metadata