instantly-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides example code for serverless functions and Express servers that ingest untrusted data from incoming webhooks (
req.body). This data is directly interpolated into downstream API requests (e.g., to the Instantly API) without validation. - Ingestion points: The
req.bodyobject in both the Vercel handler (api/webhooks/instantly.ts) and the Express server (src/server.ts). - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are included in the code examples.
- Capability inventory: The skill performs network operations via
fetchand the internalinstantlywrapper to modify data (e.g., adding to block lists, updating lead status) based on the content of the webhook. - Sanitization: The provided code snippets lack sanitization or schema validation for incoming event data before it is processed.
Audit Metadata