intercom-security-basics
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a security-focused utility designed to help developers implement authentication and integrity checks for Intercom integrations.
- [SAFE]: Promotes industry-standard credential management by instructing users to store secrets in environment variables or dedicated secret managers and ensuring these files are excluded from version control via
.gitignore. - [SAFE]: Includes defensive commands for auditing Git history to detect and remediate accidental credential exposure.
- [SAFE]: Implements robust cryptographic verification for webhooks, utilizing HMAC signatures and timing-safe comparisons to mitigate forgery and side-channel attacks.
- [SAFE]: Network activity is limited to verifying token validity via the official Intercom API (
api.intercom.io), which is a well-known and expected service for this context.
Audit Metadata