openclaw-webhooks
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The repository contains purely educational implementation boilerplate for webhook verification and handling. It implements security best practices such as timing-safe equal checks (
crypto.timingSafeEqualin Node.js,hmac.compare_digestin Python) to prevent timing side-channel attacks. It instructs users to pass credentials securely via environment variables (OPENCLAW_HOOK_TOKEN) and includes zero indicators of prompt injection, data exfiltration, obfuscation, or untrusted execution hooks.
Audit Metadata