Pilot Webhook Bridge
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's requirements and instructions match its stated purpose (forwarding Pilot Protocol events to HTTP webhooks); nothing requested is disproportionate or unrelated, but forwarding events to external endpoints carries expected data-leakage risks the user should consider.
This skill is internally consistent for forwarding Pilot events to webhooks, but be aware of data-exfiltration risk: any events you subscribe to will be POSTed to the webhook destinations you configure. Treat webhook URLs as sensitive secrets, use topic filters to limit forwarded data, validate destination endpoints (TLS, trusted services), and avoid forwarding events that may contain PII or credentials. If you need stricter controls, run subscriptions behind a filtering/transformation step (the SKILL.md itself recommends using an event-filter) or route through a trusted proxy that enforces policies and auditing before delivery.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.