instantly-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to handle Instantly event data, which can include user-generated content such as email bodies and lead replies. This introduces a theoretical surface for indirect prompt injection where malicious instructions within those emails could be interpreted by the agent.
- Ingestion points: Webhook payloads containing lead and email content as specified in
SKILL.mdandreferences/official-docs.md. - Boundary markers: The instructions do not specify prompt-level delimiters, but they do mandate schema validation.
- Capability inventory: The skill has access to
WebFetch,Write, andEdittools. - Sanitization: The skill explicitly requires schema validation, timestamp bounding, and redaction of sensitive fields.
- [EXTERNAL_DOWNLOADS]: The skill utilizes official developer resources and packages from Instantly.
- References: Targets
developer.instantly.aiandapi.instantly.aifor documentation and API access. - Packages: Mentions official tools
@instantlyai/sdkand@instantlyai/clifor integration.
Audit Metadata