linear-webhooks

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill demonstrates secure webhook handling, emphasizing HMAC signature verification using timing-safe comparisons and enforcing timestamp freshness to prevent replay attacks.
  • [COMMAND_EXECUTION]: The documentation includes standard development, testing, and environment setup commands.
  • Evidence: Commands such as npm install, npm run dev, and pytest are used throughout the examples and README files for legitimate configuration purposes.
  • [EXTERNAL_DOWNLOADS]: The skill references standard packages from official registries and the vendor's own development CLI.
  • Evidence: Mentions hookdeck-cli in SKILL.md and README files, which is a development utility provided by the skill's author (hookdeck) for local webhook forwarding.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 07:14 AM