webhook-implementation

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides architectural guidance for building Stripe webhooks. It correctly identifies security requirements such as signature verification using stripe.webhooks.constructEvent and the importance of using raw request bodies to prevent tampering.
  • [COMMAND_EXECUTION]: No suspicious command execution was found. References to the Stripe CLI (stripe listen, stripe trigger) are standard development practices for testing webhooks locally.
  • [CREDENTIALS_UNSAFE]: No hardcoded API keys or secrets were found. The skill correctly references the use of a secret for verification without providing a literal one.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 03:32 PM
Security Audit — agent-trust-hub — webhook-implementation