navan-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security concerns identified. The skill provides implementation guidelines for Navan webhooks, incorporating security best practices such as HMAC-SHA256 signature verification and timing-safe comparisons to prevent spoofing. It correctly advises the use of environment variables for sensitive credentials like API tokens and webhook secrets. Network operations are appropriately directed to the official Navan API endpoint (api.navan.com).
Audit Metadata