clerk-sessions-webhooks-security
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a security-focused documentation resource, providing instructions to ensure secure implementations of Clerk. It emphasizes high-standard security practices like 'default-deny' authorization and the use of cryptographic verification for webhooks.
- [SAFE]: It proactively warns against common security mistakes, such as logging tokens, storing secrets in client-side metadata, or skipping signature validation.
- [SAFE]: No indicators of prompt injection, data exfiltration, obfuscation, or unauthorized remote code execution were found. All mentions of environment variables and tokens are for illustrative security guidance and use safe placeholder formats.
Audit Metadata