elevenlabs-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements industry-standard security practices for webhook handling, such as using
crypto.timingSafeEqualto prevent timing attacks and a 5-minute replay window to prevent replay attacks. - [SAFE]: Instructions correctly advise using environment variables (
process.env.ELEVENLABS_WEBHOOK_SECRET) for secrets rather than hardcoding them. - [SAFE]: The skill uses the
express.raw()parser to ensure the raw request body is used for signature verification, avoiding common issues with JSON body re-serialization. - [SAFE]: External links point to official ElevenLabs documentation.
Audit Metadata