send-leads-to-webhooks
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as technical documentation for the Linkbreakers webhook API. It describes standard integration patterns including POST requests, JSON payloads, and basic security practices for endpoints.
- [DATA_EXPOSURE]: No hardcoded secrets or sensitive credentials were found. The examples use appropriate environment variable placeholders like
$LINKBREAKERS_TOKENandprocess.env.LB_HOOK_SECRET. - [EXTERNAL_DOWNLOADS]: The skill does not download or execute external scripts. It references a well-known Node.js package (express) in a code snippet provided for user implementation, which is standard practice for documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill describes processing external data (webhook payloads containing visitor information). While this is a data ingestion surface, it is the primary intended function of the service (lead capturing) and the documentation includes security recommendations like using HTTPS and unguessable secrets to protect the endpoint.
Audit Metadata