webhook-integration
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on secure webhook integration, specifically mandating HMAC-SHA256 signature verification to prevent spoofing and using idempotency keys to handle retries safely.
- [SAFE]: All referenced software packages, including the Dodo Payments SDKs and framework adapters, are official vendor resources or well-known, legitimate industry libraries (e.g., standardwebhooks, Express, BullMQ, FastAPI).
- [SAFE]: Sensitive information such as API keys and webhook signing secrets are correctly managed via environment variables rather than being hardcoded.
- [SAFE]: The skill contains no indicators of prompt injection, data exfiltration, obfuscation, or unauthorized command execution.
Audit Metadata