clerk-webhooks

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements cryptographic signature verification for all webhook handlers, ensuring that data is authentic and originates from Clerk.
  • [SAFE]: No hardcoded credentials or sensitive data exfiltration patterns were detected; the skill correctly manages secrets through environment variables.
  • [SAFE]: All external dependencies and API calls (Clerk, Resend, Slack) are legitimate and correspond to the skill's stated purpose of event-driven integration.
  • [SAFE]: Potential indirect prompt injection from webhook payloads is mitigated by the signature verification process that secures the trust chain between Clerk and the application.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 10:44 PM