adobe-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external Adobe I/O Events, which involves ingesting untrusted data from remote webhooks.
- Ingestion points: External POST payloads and GET challenge requests are described as data entry points in
SKILL.md(Instruction 3) andreferences/official-docs.md(Contract notes). - Boundary markers:
SKILL.md(Instruction 3) requires implementing GET challenge responses and POST schema/size validation before any business processing occurs. - Capability inventory: The skill is configured with
Read,Glob,Grep,Write, andEdittools for managing repository artifacts and configuration as defined in theallowed-toolssection ofSKILL.md. - Sanitization: Instructions in
SKILL.md(Instruction 4) mandate verifying digital signatures from official Adobe URLs and checking recipient client IDs to ensure data authenticity and prevent injection attacks.
Audit Metadata