typeform-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements robust security practices for webhook handling, including HMAC-SHA256 signature verification using timing-safe comparisons (crypto.timingSafeEqual in Node.js and hmac.compare_digest in Python).
- [EXTERNAL_DOWNLOADS]: References to the hookdeck-cli tool are provided for local development. Since 'hookdeck' is the skill author, this is a legitimate vendor resource.
- [DATA_EXFILTRATION]: Sensitive information such as webhook secrets is correctly handled via environment variables and .env.example templates, avoiding credential exposure.
- [PROMPT_INJECTION]: No evidence of instructions attempting to bypass safety filters or override agent behavior.
- [COMMAND_EXECUTION]: No dangerous shell commands or arbitrary code execution patterns were detected.
Audit Metadata