release-webhook-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external business signals from JSON or CSV files, creating a surface for indirect prompt injection if the processed data contains malicious instructions.\n
- Ingestion points: The
run.pyscript reads the entire content of a file provided via the--inputcommand-line argument.\n - Boundary markers: No boundary markers, delimiters, or safety instructions are present in the skill to distinguish between data and potentially embedded instructions.\n
- Capability inventory: The skill possesses file system read and write capabilities through the
pathlibmodule, which are used to process input and save output.\n - Sanitization: There is no sanitization or validation of the input content beyond basic JSON parsing.
Audit Metadata