lindy-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill enforces robust domain validation, ensuring outbound requests only target the official public.lindy.ai host, preventing redirect or exfiltration attacks.
- [SAFE]: Secret management practices are secure, using environment variables for sensitive tokens and explicitly forbidding their inclusion in logs or telemetry.
- [INDIRECT_PROMPT_INJECTION]: The skill manages external data ingestion points for webhook payloads with comprehensive safety controls. 1. Ingestion points: External webhook payloads defined by the TriggerEvent type in references/implementation.md. 2. Boundary markers: Explicit schema validation is performed by the validateEvent function, which rejects unknown fields. 3. Capability inventory: Operations are limited to authenticated POST requests via fetch to a strictly validated public.lindy.ai endpoint. 4. Sanitization: Includes strict type checking, regex validation for request IDs, and payload size enforcement to prevent malformed data from influencing agent behavior.
Audit Metadata