openclaw-webhooks

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The repository contains purely educational implementation boilerplate for webhook verification and handling. It implements security best practices such as timing-safe equal checks (crypto.timingSafeEqual in Node.js, hmac.compare_digest in Python) to prevent timing side-channel attacks. It instructs users to pass credentials securely via environment variables (OPENCLAW_HOOK_TOKEN) and includes zero indicators of prompt injection, data exfiltration, obfuscation, or untrusted execution hooks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:07 AM