deepgram-webhooks
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill correctly implements the recommended authentication method using the
dg-tokenheader for Deepgram webhooks across all provided code examples. - [SAFE]: Security documentation in
verification.mdproactively warns users about the lack of cryptographic signatures in the provider's API and provides actionable mitigations like HTTPS usage and timestamp validation. - [SAFE]: All implementation examples follow industry best practices for secret management by utilizing environment variables instead of hardcoded sensitive information.
- [SAFE]: The project dependencies are limited to widely-recognized, standard libraries such as Express, FastAPI, and Next.js, with no suspicious or unverifiable packages detected.
- [SAFE]: The use of the
hookdeck-clifor local testing is a standard developer workflow tool provided by the skill's authoring organization and contains no malicious remote execution patterns.
Audit Metadata