shipbob-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements robust webhook signature verification using the industry-standard HMAC-SHA256 scheme. It provides clear instructions to use the raw request body to prevent verification failures caused by JSON re-serialization.
- [SAFE]: Secret management follows best practices by using environment variables (e.g., SHIPBOB_WEBHOOK_SECRET) and providing .env.example files instead of hardcoding credentials.
- [COMMAND_EXECUTION]: The skill provides instructions for using the hookdeck-cli via npx for local development and debugging. This is a standard developer tool provided by the skill's author to facilitate webhook testing.
Audit Metadata