telnyx-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires several Node.js and Python packages from public registries (NPM and PyPI) for its implementation, including tweetnacl and PyNaCl for cryptographic verification.
- [COMMAND_EXECUTION]: Code examples and instructions recommend using the hookdeck-cli tool for local tunnel creation during development.
- [SAFE]: Hardcoded public keys are provided in examples to demonstrate Ed25519 signature verification; these are public keys used for verification and are not sensitive secrets.
- [SAFE]: Dependency versions in configuration files (e.g., Next.js v16) appear to be placeholders or forward-looking versions that are not currently available, which may impact initial setup but does not introduce malicious behavior.
- [SAFE]: The provided code examples process external webhook data after performing robust signature verification to ensure authenticity, mitigating risks associated with untrusted data ingestion.
Audit Metadata