appfolio-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data via webhook notifications, which is an inherent attack surface for indirect prompt injection.
- Ingestion points: The skill defines logic for an HTTP POST webhook endpoint (
/webhooks/appfolio) inSKILL.mdcode snippets. - Boundary markers: The instructions explicitly require verification of the
x-appfolio-signatureheader and rejection of malformed events before any data parsing occurs. - Capability inventory: The skill is configured with
Write,Edit, andBashtools, which represent the potential impact area if a malicious payload bypassed the signature verification. - Sanitization: The skill mandates the use of
express.raw()for signature verification andcrypto.timingSafeEqualto prevent timing attacks, providing high-quality sanitization patterns for the ingestion surface.
Audit Metadata