attio-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions focus on implementing security controls for third-party integrations. It mandates signature verification before any data processing or state changes, which is a defensive best practice.
- [EXTERNAL_DOWNLOADS]: The skill and its reference file contain links to official Attio documentation. These references are used for configuration and guidance purposes and do not trigger remote code execution or automatic installation of untrusted software.
- [INDIRECT_PROMPT_INJECTION]: The skill addresses an ingestion surface (webhook payloads). It provides explicit instructions for boundary enforcement through signature verification and payload validation, effectively mitigating the risks associated with processing external data.
Audit Metadata