algolia-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a clear and secure implementation path for integrating Algolia search insights and indexing pipelines. It correctly distinguishes between frontend (client-side) and backend (server-side) credential requirements to prevent privilege exposure.
- [CREDENTIALS_UNSAFE]: The skill explicitly instructs against sending personal identifiers as user tokens and warns not to include write-capable API keys in browser-facing events, adhering to standard security practices for SaaS integrations.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external documentation via
WebFetchand local code viaRead, representing a potential attack surface. However, it provides specific instructions for payload validation and contract verification which mitigate the risk of processing malicious data. - [EXTERNAL_DOWNLOADS]: References are limited to official Algolia documentation and well-known library packages (
algoliasearch,search-insights). These are established resources from a well-known service provider.
Audit Metadata