webhooks
Fail
Audited by Snyk on Mar 7, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill includes commands that place secrets directly on the command line (e.g.,
secrets add ... --value "...") and examples that set/send webhook/API tokens (VERCEL_TOKEN, SECRET) which would require the agent to embed secret values verbatim in generated commands, creating exfiltration risk.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests untrusted webhook payloads posted to public endpoints (POST /webhooks/{provider} like GitHub, Vercel, Todoist, Front, Stripe) and its notify functions (see references/new-provider-checklist.md and src/inngest/functions/*-notify.ts) build agent prompts and call gateway.notify, so third-party content can directly influence agent decisions and actions.
Audit Metadata