gemini-webhooks

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE

Full Analysis

[SAFE]: The skill implements strong signature verification for Google Gemini API webhooks following the Standard Webhooks specification. Replay attacks are mitigated by validating the webhook-timestamp header within a 5-minute window, and timing attacks are prevented by utilizing crypto.timingSafeEqual in Node.js and hmac.compare_digest in Python.

Audit Metadata

Risk Level

SAFE

Analyzed

Sep 15, 2026, 07:07 AM