elevenlabs-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides robust security implementation details for webhook verification. It uses
crypto.timingSafeEqualto prevent timing attacks and implements a 5-minute replay window check to mitigate replay attacks. - [SAFE]: Credentials and secrets are handled securely by recommending the use of environment variables (
process.env.ELEVENLABS_WEBHOOK_SECRET) rather than hardcoding sensitive values. - [SAFE]: Command execution is restricted to documented local testing examples using
curlagainstlocalhost, with no evidence of unauthorized network operations or data exfiltration. - [SAFE]: The skill focuses on legitimate integration with ElevenLabs services and follows best practices for asynchronous webhook processing to avoid endpoint timeouts.
Audit Metadata