deepgram-webhooks

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill correctly implements the recommended authentication method using the dg-token header for Deepgram webhooks across all provided code examples.
  • [SAFE]: Security documentation in verification.md proactively warns users about the lack of cryptographic signatures in the provider's API and provides actionable mitigations like HTTPS usage and timestamp validation.
  • [SAFE]: All implementation examples follow industry best practices for secret management by utilizing environment variables instead of hardcoded sensitive information.
  • [SAFE]: The project dependencies are limited to widely-recognized, standard libraries such as Express, FastAPI, and Next.js, with no suspicious or unverifiable packages detected.
  • [SAFE]: The use of the hookdeck-cli for local testing is a standard developer workflow tool provided by the skill's authoring organization and contains no malicious remote execution patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 12:14 PM