intercom-webhooks
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's instructions suggest using 'npx hookdeck-cli listen 3000 intercom' for local development. This utility is a developer tool provided by the skill's author (Hookdeck) to forward webhooks to local endpoints during testing.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external Intercom webhook notifications, which presents a surface for processing untrusted data.
- Ingestion points: Raw request bodies are ingested in the Express, Next.js, and FastAPI examples (e.g., 'request.text()' in 'examples/nextjs/app/webhooks/intercom/route.ts').
- Boundary markers: The skill implements mandatory HMAC-SHA1 signature verification using the 'INTERCOM_CLIENT_SECRET', ensuring that only authenticated payloads from Intercom are processed.
- Capability inventory: The example handlers are limited to logging event data to the console based on the 'topic' field. No dangerous capabilities such as filesystem writes, network exfiltration, or dynamic code execution are present in the provided templates.
- Sanitization: Payloads are validated via cryptographic signature and parsed using standard JSON libraries after verification.
Audit Metadata