razorpay-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends the use of
npx hookdeck-clifor local development. This is a vendor-supplied utility for webhook tunneling and testing. - [COMMAND_EXECUTION]: Instructions include standard shell commands for package installation, starting local development servers (Next.js, Express, FastAPI), and running test suites.
- [SAFE]: The skill correctly implements and emphasizes the requirement to verify the
X-Razorpay-Signatureheader using the raw request body (unparsed bytes) to prevent tampering and ensure payload authenticity.
Audit Metadata