auth0-webhooks
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides handlers that process external event data from Auth0. \n
- Ingestion points: Handlers in examples/express/src/index.js, examples/nextjs/app/webhooks/auth0/route.ts, and examples/fastapi/main.py parse JSON payloads. \n
- Boundary markers: None. \n
- Capability inventory: Capabilities are limited to logging event fields. No dangerous operations like shell execution or file writing are performed on the data. \n
- Sanitization: Data is logged without explicit sanitization. \n- [REMOTE_CODE_EXECUTION]: Documentation suggests using npx hookdeck-cli for development. This is a vendor-provided tool from the skill author and is considered safe for the intended purpose.
Audit Metadata