webhook-platform-design
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a set of technical design guidelines for building robust and secure webhook systems. It focuses on architecture, event naming, and signing protocols rather than providing executable code.
- [SAFE]: The skill explicitly promotes security best practices, such as adopting the Standard Webhooks specification, implementing HMAC-SHA256 signing for replay protection, and using prefixed secrets for better detection by security scanners.
- [SAFE]: All external references to vendors (Stripe, GitHub, Shopify, Svix, Hookdeck) and repositories are used as benchmarks or industry standard citations for educational and design purposes.
- [SAFE]: No malicious patterns were identified across the 11 threat categories, including prompt injection, data exfiltration, or obfuscation. The skill operates as a consultative design tool with no dangerous execution capabilities.
Audit Metadata