meraki-webhooks

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides functional code examples in Node.js (Express, Next.js) and Python (FastAPI) for receiving and verifying Cisco Meraki webhooks. All code follow standard security patterns.
  • [COMMAND_EXECUTION]: Local development instructions recommend using hookdeck-cli via npx. This is the official tool provided by the author (hookdeck) for webhook tunneling and does not represent an unauthorized command execution risk.
  • [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries in its dependency manifests (e.g., express, fastapi, next, dotenv). While some version numbers in the manifests appear to be placeholders or future-dated (e.g., typescript@^7.0.2), the packages themselves are from legitimate registries.
  • [CREDENTIALS_UNSAFE]: The skill correctly instructs users to store the Meraki shared secret in a .env file and provides .env.example templates with placeholders, avoiding hardcoded secrets in the codebase.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 03:53 AM
Security Audit — agent-trust-hub — meraki-webhooks