stigg-webhooks
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and handler templates for Stigg webhooks. It explicitly recommends best practices such as verifying the
Stigg-Webhooks-Secretheader to ensure authenticity and using environment variables for sensitive secrets. - [SAFE]: External references to docs.stigg.io are for official vendor documentation and do not involve untrusted code or configuration downloads.
- [SAFE]: Evaluation of the indirect prompt injection surface (Category 8).
- Ingestion points: JSON payload ingestion via
req.json()inSKILL.mdandreferences/handler-patterns.md. - Boundary markers: Includes verification of the
Stigg-Webhooks-Secretheader to validate the request source. - Capability inventory: Handlers are designed to trigger internal application logic, such as subscription management or notifications.
- Sanitization: Relies on cryptographic verification (secret comparison) as a trust boundary for incoming data.
Audit Metadata