skills/jeremylongshore/tons-of-skills-marketplace/customerio-reference-architecture/Gen Agent Trust Hub
customerio-reference-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The architecture includes ingestion points for external data via webhooks and event buses, which represents a potential surface for indirect prompt injection if the processed data were to be used in LLM prompts downstream.\n
- Ingestion points: Data enters via the
CustomerIOWebhooksrouter (src/webhooks/customerio.ts) andCustomerIOEventBusconsumer (src/services/customerio/event-bus.ts).\n - Boundary markers: The templates provide for HMAC signature verification to authenticate incoming webhook data.\n
- Capability inventory: The messaging service performs network operations (identify, track, sendEmail) via the
customerio-nodeand@customerio/tracklibraries.\n - Sanitization: The architecture implements signature verification to validate requests from external sources.\n- [SAFE]: The skill follows established security patterns for infrastructure and application code. It uses Terraform to manage secrets via Google Secret Manager instead of hardcoding API keys, and it utilizes standard libraries for integration with well-known services.
Audit Metadata