microsoft-sharepoint-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Webhook verification logic uses standard, timing-safe functions (crypto.timingSafeEqual in Node.js and hmac.compare_digest in Python) to prevent timing attacks during secret validation.\n- [SAFE]: The skill implements the mandatory SharePoint validation handshake as the first step in the request lifecycle, adhering to official documentation and preventing subscription failures.\n- [SAFE]: All listed dependencies are well-known, legitimate packages from official registries (NPM and PyPI).\n- [SAFE]: Command usage involving npx hookdeck-cli is documented for local development purposes and originates from the skill's author, hookdeck.\n- [SAFE]: Secret management is handled through environment variable placeholders (.env.example), ensuring that no sensitive credentials are hardcoded in the skill's files.
Audit Metadata