webhook-setup
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements webhook receiver endpoints that ingest untrusted data from external providers such as Stripe and GitHub. This represents an attack surface for indirect prompt injection or data manipulation if the provider is compromised or the signing secret is leaked.
- Ingestion points: Webhook HTTP POST endpoints for Stripe and GitHub defined in the example implementations within SKILL.md.
- Boundary markers: The skill implements industry-standard HMAC-SHA256 signature verification in both Node.js and Python examples to authenticate the payload source.
- Capability inventory: The handlers perform database updates (PostgreSQL), enqueue events for background processing (BullMQ/FastAPI BackgroundTasks), and include stubs for triggering CI pipelines.
- Sanitization: Payloads are verified against shared secrets using constant-time comparison functions before processing, and database operations use parameterized queries to prevent SQL injection.
Audit Metadata