intercom-reference-architecture

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows security best practices for credential management by instructing the user to load the INTERCOM_ACCESS_TOKEN from an environment variable rather than hardcoding it, as seen in the src/intercom/client.ts implementation.
  • [SAFE]: The architecture includes a dedicated signature verification step for incoming webhooks (src/webhooks/signature.ts) to ensure data integrity and authenticity by checking the X-Hub-Signature header.
  • [SAFE]: The skill utilizes the official intercom-client npm package, a well-known and trusted library for interacting with the Intercom API.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:44 AM
Security Audit — agent-trust-hub — intercom-reference-architecture