paystack-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No direct prompt injection or instructions to override agent behavior were detected. The skill addresses indirect prompt injection surfaces by implementing robust cryptographic signature verification for all external webhook data before processing.
- [DATA_EXFILTRATION]: No unauthorized data access or exfiltration patterns were identified. Secret management follows best practices by using environment variables with placeholders for credentials.
- [REMOTE_CODE_EXECUTION]: No suspicious remote code execution patterns were found. The mention of the Hookdeck CLI for local development refers to a documented tool from the skill's authoring vendor.
- [COMMAND_EXECUTION]: Command usage is restricted to standard project setup and development tasks, such as installing dependencies and running local test servers.
Audit Metadata