hootsuite-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing untrusted data from external webhooks, creating a potential attack surface for indirect prompt injection.
- Ingestion points: Webhook handler endpoint in
SKILL.md(app.post('/webhooks/hootsuite')) and polling mechanism for message data. - Boundary markers: Instructions explicitly require rejecting unknown origins, stale deliveries, and malformed payloads.
- Capability inventory: The skill allows
Bash(curl:*)and standard file operations (Read,Write,Edit) via frontmatter configuration. - Sanitization: The documentation mandates signature/timestamp verification and payload validation, though the simplified code snippets omit the specific implementation logic.
- [DATA_EXFILTRATION]: The skill demonstrates network operations to official Hootsuite API endpoints (
platform.hootsuite.com) and an internal webhook URL defined via environment variables. These are standard integration patterns and do not involve unauthorized exfiltration of sensitive local data.
Audit Metadata