framer-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines an integration pattern for receiving external webhook data, which constitutes a surface for indirect prompt injection.
- Ingestion points: The Express.js endpoint example in SKILL.md processes incoming data from
req.body. - Boundary markers: The provided documentation does not include explicit delimiters or instructions to the agent to treat the external payload as untrusted content, though it does demonstrate authentication via signature verification.
- Capability inventory: The skill environment is configured with Bash, Write, and Edit tools, which could be targeted by malicious payloads if content is not properly sanitized.
- Sanitization: While the code example includes a
verifySignaturefunction to ensure data integrity and authenticity, it does not demonstrate specific sanitization or escaping of the actual data fields before they are used in downstream logic.
Audit Metadata