community-webhooks

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides detailed documentation and reference implementations for securely receiving webhooks from Community (community.com). It emphasizes security best practices including HMAC-SHA256 signature verification using the raw request body, constant-time comparison to prevent timing attacks, and event deduplication to handle at-least-once delivery semantics.
  • [EXTERNAL_DOWNLOADS]: The documentation suggests using hookdeck-cli via npx for local development and testing. This is an official utility provided by the vendor (Hookdeck) for tunneling and inspecting webhooks during development.
  • [COMMAND_EXECUTION]: The setup instructions include standard CLI commands for managing environments and running applications, such as npm install, python3 -m venv, uvicorn, and various test runners (vitest, jest, pytest).
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 07:07 AM
Security Audit — agent-trust-hub — community-webhooks