skills/svix/ai/svix-sending-webhooks/Gen Agent Trust Hub

svix-sending-webhooks

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it is designed to analyze local repository content and project files to determine integration parameters. 1. Ingestion points: The skill reads project manifest files (package.json, pyproject.toml, etc.), database schemas, environment variables, and source code via the triage.md and quickstart.md logic. 2. Boundary markers: There are no explicit markers or delimiters used when the agent processes these external data sources. 3. Capability inventory: The skill has access to Read, Grep, Glob, WebFetch, and AskUserQuestion tools. 4. Sanitization: The skill does not implement explicit sanitization or filtering for data ingested from the repository. While this poses a risk of the agent following instructions embedded in code comments or metadata, the skill enforces a human-in-the-loop policy and a 'Plan-first' contract to ensure the user reviews all proposed actions.
  • [EXTERNAL_DOWNLOADS]: The skill fetches technical documentation, integration presets, and installation guidelines from official Svix domains (docs.svix.com, api.svix.com, svix.com) and GitHub repositories. This behavior is consistent with the skill's purpose as a vendor-provided integration assistant and is used to ensure the agent uses the most current reference material.
  • [COMMAND_EXECUTION]: The skill provides detailed instructions for using the Svix CLI (svix) for tasks like local development relaying and shell scripting. It guides the agent in recommending correct command-line arguments to the user but does not autonomously execute system-level commands that would bypass user oversight.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 12:04 AM
Security Audit — agent-trust-hub — svix-sending-webhooks