infra-webhook-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data (JSON or CSV), which represents a potential surface for indirect prompt injection attacks where malicious instructions could be embedded in the webhook data.
- Ingestion points: The run.py script reads the contents of a file provided via the --input argument in the main function using Path.read_text().
- Boundary markers: The current implementation lacks explicit boundary markers or instructions for the agent to ignore instructions embedded in the processed data.
- Capability inventory: The skill is restricted to local file read/write operations and basic JSON processing within the run.py script.
- Sanitization: There is no content-level sanitization of the input data before it is parsed by json.loads().
Audit Metadata