linear-webhooks
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill demonstrates secure webhook handling, emphasizing HMAC signature verification using timing-safe comparisons and enforcing timestamp freshness to prevent replay attacks.
- [COMMAND_EXECUTION]: The documentation includes standard development, testing, and environment setup commands.
- Evidence: Commands such as
npm install,npm run dev, andpytestare used throughout the examples and README files for legitimate configuration purposes. - [EXTERNAL_DOWNLOADS]: The skill references standard packages from official registries and the vendor's own development CLI.
- Evidence: Mentions
hookdeck-cliinSKILL.mdand README files, which is a development utility provided by the skill's author (hookdeck) for local webhook forwarding.
Audit Metadata