wix-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for webhook handling, including mandatory signature verification and event deduplication logic.
- [EXTERNAL_DOWNLOADS]: The documentation mentions the use of
hookdeck-clivianpxfor local development. This is an official tool provided by the skill's author (hookdeck) and is used for its intended purpose of tunneling webhooks. - [COMMAND_EXECUTION]: The skill provides standard development commands for installing dependencies (
npm install,pip install) and running servers (npm run dev,uvicorn), which are necessary for the provided examples. - [EXTERNAL_DOWNLOADS]: Several example dependency manifests (
package.json,requirements.txt) list future or non-existent versions for well-known packages (e.g.,typescript@^7.0.2,next@^16.2.11,fastapi>=0.139.2,jest@^30.4.2). While the package names themselves are legitimate, the use of unreleased versions in the examples is noted as a discrepancy likely stemming from the skill's generation process.
Audit Metadata