pylon-webhooks

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate instructions and code examples for Pylon webhook verification using HMAC-SHA256 and timing-safe equality checks.
  • [COMMAND_EXECUTION]: Documentation includes standard commands for local development workflows, such as starting servers (npm run dev, uvicorn main:app), installing dependencies (npm install, pip install), and running test suites (npm test, pytest).
  • [EXTERNAL_DOWNLOADS]: The skill recommends using hookdeck-cli via npx for local webhook testing. This is a utility provided by the skill's author (hookdeck) for tunneling webhook deliveries to a local environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 07:05 AM
Security Audit — agent-trust-hub — pylon-webhooks