igrantio-backend-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure webhook signature verification using constant-time comparison (timingSafeEqual) to prevent timing attacks.
- [SAFE]: Configuration and secrets such as API keys and HMAC secrets are managed via environment variables, following security best practices.
- [SAFE]: Network operations are limited to interaction with the iGrant.io vendor APIs for legitimate business logic such as webhook registration.
Audit Metadata