twitter-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The provided example projects for Next.js, Express, and FastAPI include dependency manifests (
package.json,requirements.txt) with version numbers that do not match current stable releases (e.g.,next^16.2.11,typescript^7.0.2,vitest^4.1.10,fastapi>=0.139.2, andpytest>=9.1.1). These appear to be placeholder or incorrectly generated version numbers for well-known and trusted software packages; while they likely cause installation failures, they do not point to untrusted or malicious sources. - [SAFE]: The skill properly implements security best practices for webhook verification, including the use of the
crypto.timingSafeEqualmethod in Node.js andhmac.compare_digestin Python to protect against timing-based side-channel attacks during signature validation. - [SAFE]: The skill correctly identifies and instructs the user to manage the
TWITTER_CONSUMER_SECRETusing environment variables and.envfiles, which is the standard practice for secure credential management in the targeted frameworks.
Audit Metadata