velt-rest-apis-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a set of documentation and architectural guidelines for integrating Velt services. It does not contain executable scripts or malicious patterns. All identified code snippets are instructional examples for using standard libraries like express, next, and the Velt SDK.
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing data from external Velt webhooks and API responses, which is the primary intended use case. Ingestion points are located in webhooks-basic.md and webhooks-advanced.md where webhook payloads are received. Boundary markers are explicitly instructed through authentication token and cryptographic signature verification. The capability inventory involves standard network operations against the vendor domain api.velt.dev. Sanitization is implemented via mandatory header validation and signature checks as part of the best-practice guidelines.
Audit Metadata