zerohash-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides reference implementations for verifying Zero Hash webhooks across multiple frameworks (Express, Next.js, and FastAPI).
- [SAFE]: Signature verification correctly utilizes HMAC-SHA256 with the raw request body, adhering to standard security protocols for webhook authentication.
- [SAFE]: The implementation includes a replay protection mechanism using the
x-zh-hook-timestampheader with a ±5 minute tolerance window. - [SAFE]: All external links point to official Zero Hash documentation or the vendor's (Hookdeck) own public repositories and tools.
- [SAFE]: Dependencies listed in the example projects are standard, well-maintained libraries (e.g., FastAPI, Express, Vitest).
Audit Metadata