Skills
skills/chunkydotdev/email-skills/webhook-processing/Gen Agent Trust Hub

webhook-processing

Pass

Audited by Gen Agent Trust Hub on Apr 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill is a comprehensive documentation guide that educates the agent on processing webhooks securely.
  • [SAFE]: Code snippets provided (TypeScript and SQL) follow industry security standards, such as using timingSafeEqual for signature validation and capturing raw body buffers for HMAC verification to prevent tampering.
  • [SAFE]: The skill includes explicit security warnings and mitigations for specific attack vectors, such as SSRF (Server-Side Request Forgery) when handling AWS SNS subscription confirmations and replay attacks via timestamp validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 10, 2026, 07:38 PM
Security Audit — agent-trust-hub — webhook-processing