clerk-webhooks
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements cryptographic signature verification for all webhook handlers, ensuring that data is authentic and originates from Clerk.
- [SAFE]: No hardcoded credentials or sensitive data exfiltration patterns were detected; the skill correctly manages secrets through environment variables.
- [SAFE]: All external dependencies and API calls (Clerk, Resend, Slack) are legitimate and correspond to the skill's stated purpose of event-driven integration.
- [SAFE]: Potential indirect prompt injection from webhook payloads is mitigated by the signature verification process that secures the trust chain between Clerk and the application.
Audit Metadata