nuvemshop-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill provides clear instructions and code examples for implementing Nuvemshop (Tiendanube) webhooks across several frameworks (Express, Next.js, and FastAPI).
- [SAFE]: Implements robust security patterns for webhook handling, including signature verification using HMAC-SHA256 and constant-time comparison to prevent timing attacks.
- [SAFE]: Correctly advises developers to use raw request bodies for verification and to store sensitive credentials like the Client Secret in environment variables rather than hardcoding them.
- [SAFE]: External references and documentation link to the official Nuvemshop documentation and the vendor's own established repositories, posing no security risk.
Audit Metadata