linktree-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain instructions to influence agent behavior.\n
- Ingestion points: The skill uses
Read,Glob, andGrepinSKILL.mdto inspect repository files such as partner contracts, fixtures, and consumer code. It also usesWebFetchto ingest external documentation from Linktree domains.\n - Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the ingested data.\n
- Capability inventory: The skill is authorized to modify local files via
WriteandEditand perform network operations viaWebFetch.\n - Sanitization: While the skill mentions using "sanitized fixtures", there is no technical enforcement of input sanitization or escaping of external content before it is processed by the agent.
Audit Metadata