meraki-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides functional code examples in Node.js (Express, Next.js) and Python (FastAPI) for receiving and verifying Cisco Meraki webhooks. All code follow standard security patterns.
- [COMMAND_EXECUTION]: Local development instructions recommend using
hookdeck-clivianpx. This is the official tool provided by the author (hookdeck) for webhook tunneling and does not represent an unauthorized command execution risk. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries in its dependency manifests (e.g.,
express,fastapi,next,dotenv). While some version numbers in the manifests appear to be placeholders or future-dated (e.g.,typescript@^7.0.2), the packages themselves are from legitimate registries. - [CREDENTIALS_UNSAFE]: The skill correctly instructs users to store the Meraki shared secret in a
.envfile and provides.env.exampletemplates with placeholders, avoiding hardcoded secrets in the codebase.
Audit Metadata