openevidence-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation resource for OpenEvidence webhook integration. All code snippets demonstrate secure practices, such as using environment variables (
process.env) for handling sensitive API keys and secrets. - [SAFE]: The signature verification implementation uses
crypto.timingSafeEqual, which is the standard best practice for preventing timing attacks during webhook validation. - [SAFE]: External references are restricted to the official service domain (
openevidence.com) and the developer's professional domains, which are consistent with the skill's purpose and author information.
Audit Metadata