appfolio-webhooks-events

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data via webhook notifications, which is an inherent attack surface for indirect prompt injection.
  • Ingestion points: The skill defines logic for an HTTP POST webhook endpoint (/webhooks/appfolio) in SKILL.md code snippets.
  • Boundary markers: The instructions explicitly require verification of the x-appfolio-signature header and rejection of malformed events before any data parsing occurs.
  • Capability inventory: The skill is configured with Write, Edit, and Bash tools, which represent the potential impact area if a malicious payload bypassed the signature verification.
  • Sanitization: The skill mandates the use of express.raw() for signature verification and crypto.timingSafeEqual to prevent timing attacks, providing high-quality sanitization patterns for the ingestion surface.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:40 AM
Security Audit — agent-trust-hub — appfolio-webhooks-events