github-webhooks
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality instructional content for building secure integrations, including code examples for HMAC-SHA256 signature verification and protection against timing attacks.
- [SAFE]: The instructions correctly advise on secret management, recommending that verification values be stored in secure environment variables rather than hardcoded in the repository.
- [SAFE]: The documentation includes technical warnings against common pitfalls like verifying re-serialized request bodies, which ensures the integrity of the security check.
- [SAFE]: The skill provides accurate technical references for GitHub webhook events and payload structures, assisting in the development of correct and secure event routing.
Audit Metadata