circleci-webhooks
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a receiver for external webhook payloads, creating a surface for potential indirect prompt injection if the ingested data is subsequently processed by an agent without further validation.
- Ingestion points: Webhook route handlers in
examples/nextjs/app/webhooks/circleci/route.ts,examples/express/src/index.js, andexamples/fastapi/main.pyingest raw payload data via HTTP POST. - Boundary markers: Mandatory HMAC-SHA256 signature verification is implemented to ensure payload authenticity before processing, providing a strong barrier against unauthorized data injection.
- Capability inventory: The provided code demonstrates logging, event-type dispatching, and idempotency checks using the payload's unique ID.
- Sanitization: Data is parsed as JSON; however, user-controlled fields such as commit subjects or author names are logged directly without specific sanitization for downstream LLM contexts.
Audit Metadata