akeneo-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill demonstrates high-quality security practices for webhook integration.
- Implements timing-safe comparisons using
crypto.timingSafeEqual(Node.js) andhmac.compare_digest(Python) to prevent side-channel attacks. - Includes replay protection by verifying the
x-akeneo-request-timestampagainst a 5-minute tolerance window. - Correctly instructs developers to use the raw request body for signature verification to avoid parsing discrepancies.
- [EXTERNAL_DOWNLOADS]: The documentation references the author's own utility for local development.
- Evidence: Suggests using
npx hookdeck-clito tunnel requests for local testing, which is a standard developer tool provided by the skill author (hookdeck). - [COMMAND_EXECUTION]: The README files provide standard CLI instructions for setting up and running the examples.
- Evidence: Commands for
npm install,npm start,uvicorn, andpytestare included to facilitate local development and testing of the provided handlers.
Audit Metadata