catalog-webhook-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a boilerplate scaffold for data processing. No evidence of malicious behavior, obfuscation, or unauthorized access was found in the scripts or metadata.
- [INDIRECT_PROMPT_INJECTION]: The skill contains a data ingestion surface in run.py via file input. * Ingestion points: run.py reads data from a path specified by the --input argument. * Boundary markers: None present; the script relies on JSON structure for parsing. * Capability inventory: The script performs local file system reads and writes using pathlib. * Sanitization: Content is parsed using json.loads(), which validates JSON structure but does not filter content for injection patterns.
Audit Metadata