api-webhook-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill operates entirely locally using standard Python libraries to perform file I/O operations. It does not attempt to access sensitive files, communicate over the network, or execute arbitrary shell commands.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests data from external JSON files.
- Ingestion points: Data enters the skill via
run.pywhere it reads from a path provided in the--inputargument. - Boundary markers: None detected.
- Capability inventory: The skill uses
pathlibfor file system access (read/write). - Sanitization: No input sanitization or validation is performed on the ingested JSON data.
Audit Metadata