Skills
Navigate
skills/sandeepmvl/rails-skills/webhook-handling/Gen Agent Trust Hub

webhook-handling

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external webhook providers (e.g., GitHub, Stripe).
  • Ingestion points: WebhookEvent model and controller actions parsing raw_body in SKILL.md.
  • Boundary markers: The skill mandates signature verification using secure_compare and idempotency checks via unique database indexes to validate the source and uniqueness of the data.
  • Capability inventory: Includes database writes via ActiveRecord, job enqueuing via ApplicationJob, and processing logic within jobs.
  • Sanitization: The skill recommends encryption for PII in the payload but relies on standard JSON parsing for data handling.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 03:48 AM
Security Audit — agent-trust-hub — webhook-handling