paypro-global-webhooks
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate integration templates for PayPro Global webhooks, implementing mandatory cryptographic verification steps.
- [SAFE]: Verification logic correctly uses timing-safe comparison methods (e.g.,
crypto.timingSafeEqualin Node.js andhmac.compare_digestin Python) to mitigate side-channel attacks. - [SAFE]: The skill identifies and uses official PayPro Global IP addresses for optional source IP verification.
- [SAFE]: External tools and repositories referenced in the skill (such as
hookdeck-cliandwebhook-skillsrepository) are owned by the skill's author ('hookdeck') and serve legitimate development purposes. - [SAFE]: All identified dependencies are standard web development libraries, and no hardcoded credentials or data exfiltration patterns were detected.
Audit Metadata