quicknode-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for ingesting and processing external blockchain event data via webhooks, which could contain attacker-controlled content.
- Ingestion points: The Express.js webhook handler in
SKILL.mdaccepts arbitrary JSON payloads from external blockchain streams. - Boundary markers: The provided instructions do not include specific delimiters or warnings to treat the incoming blockchain data as untrusted content.
- Capability inventory: The skill's configuration allows for
Bash(npm:*)andBash(curl:*), providing a significant capability tier if an injection were to occur. - Sanitization: The sample code demonstrates logging and processing of event fields (blockNumber, transactionHash, topics) without explicit sanitization or validation of the content.
Audit Metadata