intercom-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Uses the
intercom-clientlibrary and platform CLI tools (vercel,flyctl,gcloud) to manage deployments and API interactions. - [COMMAND_EXECUTION]: Provides shell commands and scripts for deploying applications and managing secrets on Vercel, Fly.io, and Google Cloud Run platforms.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: External webhook payloads are received at the
/api/webhooks/intercomendpoint defined inreferences/implementation.md. - Boundary markers: The implementation uses
crypto.timingSafeEqualto verify thex-hub-signatureheader against theINTERCOM_WEBHOOK_SECRETbefore processing the payload. - Capability inventory: The skill uses environment variables for authentication and executes platform-specific deployment commands via CLI tools.
- Sanitization: Webhook signatures are validated using HMAC-SHA1 to ensure payload integrity before parsing.
Audit Metadata