webhook-receiver-hardener
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard security best practices for webhook implementation, including HMAC signature verification, idempotency, and deduplication. No malicious patterns or security vulnerabilities were detected.
- [SAFE]: The code examples follow secure coding practices, such as using
crypto.timingSafeEqualfor signature comparisons to prevent timing attacks, and referencing environment variables for secrets rather than hardcoding them.
Audit Metadata