jobspipe-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation outlines a standard and secure webhook verification process using HMAC-SHA256 signatures.
- [SAFE]: The provided Node.js implementation example correctly uses
timingSafeEqualto mitigate timing attacks and includes a 5-minute timestamp window check to prevent replay attacks. - [SAFE]: All external references, including the dashboard and OpenAPI specification links, point to the official
jobspipe.devdomain, which is the legitimate infrastructure for this vendor.
Audit Metadata