brightdata-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides code templates for processing external data received via webhooks from the Bright Data API.
- Ingestion points: Webhook endpoints in
api/webhooks/brightdata.tsandapi/webhooks/brightdata-notify.tsare designed to receive JSON payloads from external sources. - Boundary markers: The templates include authentication logic to verify the
Authorizationheader against a shared secret (BRIGHTDATA_WEBHOOK_SECRET). - Capability inventory: The code samples demonstrate reading request bodies and logging specific fields like
urlandtitleto the console. - Sanitization: While the skill includes shared-secret verification, it does not demonstrate specific sanitization or filtering of the external record content before logging or storage, which is a standard surface for indirect prompt injection.
Audit Metadata