paddle-webhooks
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides secure implementation patterns for receiving external data.
- It mandates the use of
paddle.webhooks.unmarshal()for HMAC signature verification to ensure data integrity and authenticity. - It correctly advises using
request.text()to access the raw request body, preventing potential verification failures caused by re-serialization of parsed JSON. - It recommends industry-standard secret management by using environment variables for API keys and webhook secrets.
- It references official Paddle documentation and a trusted starter kit repository for further guidance.
Audit Metadata