fastspring-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides templates for webhook verification that adhere to security best practices.\n- [SAFE]: Implementation examples in Node.js and Python use timing-safe comparison functions (
timingSafeEqualandcompare_digest) to prevent timing attacks.\n- [SAFE]: Correctly instructs users to verify signatures against the raw request body before JSON parsing, ensuring the integrity of the data as transmitted by the provider.\n- [EXTERNAL_DOWNLOADS]: The example projects list standard dependencies for Next.js, Express, and FastAPI.\n- [COMMAND_EXECUTION]: Instructions include standard commands for setting up development environments and running local tests.
Audit Metadata