webhook-reliability-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill architecture handles external data, creating a potential surface for indirect prompt injection. \n- Ingestion points: The
run.pyscript reads JSON data from a file path provided via the--inputcommand-line argument. \n- Boundary markers: The skill does not implement delimiters or safety instructions (e.g., "ignore embedded instructions") when processing the input file. \n- Capability inventory: The script includes local file read and write capabilities; it contains no network operations, subprocess execution, or dynamic code evaluation. \n- Sanitization: No input validation, escaping, or sanitization logic is implemented in the provided scaffold script.
Audit Metadata