fireflies-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strong security practices for handling external data. The webhook receiver in
app/api/webhooks/fireflies/route.tscorrectly verifies thex-hub-signatureusing HMAC-SHA256 withcrypto.timingSafeEqual, which effectively prevents unauthorized execution and timing attacks. - [SAFE]: Secret management instructions follow the principle of least privilege. It guides the user to use platform-specific secret stores (e.g.,
vercel env add,gcloud secrets) and environment variables (process.env.FIREFLIES_API_KEY) rather than hardcoding sensitive credentials in the source code. - [SAFE]: Network operations are restricted to well-known services and local testing. Communication is directed to the official Fireflies.ai API (
https://api.fireflies.ai/graphql) and deployment targets on Vercel and Google Cloud Run.
Audit Metadata