sentry-webhooks
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates secure handling of external webhook data by mandating HMAC-SHA256 signature verification before processing payloads. It provides clear guidance on using raw request bytes to avoid common serialization pitfalls that lead to verification failures.
- [SAFE]: Sensitive configuration management follows industry best practices by instructing users to store the
SENTRY_CLIENT_SECRETin environment variables rather than hardcoding it. The examples provided use generic hex placeholders for demonstration purposes. - [SAFE]: External tool recommendations, specifically the
hookdeck-cli, are vendor-owned resources intended for local development and debugging. These are documented as standard utilities for the skill's primary purpose. - [SAFE]: The skill addresses potential indirect prompt injection surfaces by implementing strong boundary markers (HMAC verification) and promoting defensive programming patterns (optional chaining, schema-aware parsing) when handling resource-specific data.
Audit Metadata