customerio-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content on securely implementing webhook signature verification. It correctly advocates for the use of raw request bodies and timing-safe comparison functions (e.g.,
crypto.timingSafeEqualin Node.js andhmac.compare_digestin Python) to prevent signature bypass and timing attacks. - [EXTERNAL_DOWNLOADS]: The documentation recommends the use of
npx hookdeck-clifor local testing. This is a developer utility provided by the skill author to create tunnels for local webhook development. - [COMMAND_EXECUTION]: The skill includes standard commands for project initialization and local development, such as
npm install,npm run dev, anduvicorn main:app. These are typical for software development tutorials.
Audit Metadata